Threats tagged 'ghsa-qccg-83jc-w756'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to perform server-side request forgery (SSRF) and obtain sensitive information. The vulnerability does not impact integrity or availability but has a high confidentiality impact. No public exploits or known active exploitation have been reported. No patch or remediation information is currently provided.