IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote attacker to bypass security restrictions due to improper certificate validation. This flaw could enable an attacker to compromise confidentiality and integrity of the system without requiring user interaction.