Threats tagged 'ghsa-qx88-x8mc-cqf9'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability where remote authenticated attackers can bypass object-level authorization checks on keystore objects. This flaw allows unauthorized access to sensitive keystore information because the system does not properly verify user permissions for reading these objects.