Threats tagged 'ghsa-wxgx-7hc6-f6h2'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an authorization vulnerability. A remote authenticated attacker could exploit improper authorization checks on request URL values to access sensitive information belonging to other users. This vulnerability does not impact integrity or availability but can lead to unauthorized information disclosure.