Threats tagged 'ghsa-q558-2q77-cqmj'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to perform server-side request forgery (SSRF). This flaw can lead to unauthorized access to sensitive information and bypass of security restrictions. The vulnerability has a high severity with a CVSS score of 9.6, indicating critical impact on confidentiality and integrity without affecting availability.