Threats tagged 'ghsa-mh5f-5xj3-mg8v'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authorization vulnerability that allows a remote authenticated attacker to access sensitive information and modify or delete data belonging to other tenants. This flaw arises from missing authorization checks, enabling cross-tenant data compromise.