IBM API Connect vulnerabilities

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 have improper validation of file paths. A remote authenticated attacker could obtain sensitive information.

IBM API Connect versions 12.1.0.0 through 12.1.1.2 have a broken object-level authorization vulnerability. A remote authenticated attacker could obtain sensitive information.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 have improper restriction of security token assignment. A remote authenticated attacker could bypass security restrictions to access and modify sensitive information.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 have a broken object-level authorization vulnerability. A remote authenticated attacker could obtain sensitive information from other tenants.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote attacker to overwrite arbitrary files.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 suffer from improper authorization: identifiers in requests are not sufficiently checked against user permissions, allowing a remote authenticated attacker to access data belonging to other tenants.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 improperly validates input, which may cause platform credentials to be injected into outbound requests. Insufficient validation strictness can result in credentials being included in outbound requests.

IBM API Connect versions 12.1.0.0 through 12.1.1.2 is vulnerable to server-side request forgery (SSRF). A remote authenticated attacker can obtain sensitive information.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to cross-site scripting because user-supplied input is not properly neutralized when a web page is updated, allowing arbitrary JavaScript to run in the victim's browser.

IBM API Connect versions 12.1.0.0 through 12.1.1.2 is vulnerable to path traversal. A remote attacker can view arbitrary files on the system, accessing directories outside the intended location via a specially crafted URL request.

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 has an improperly implemented security check that makes token validation incomplete. As a result, a token may be accepted for a purpose it was not intended for.

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 does not fully verify a cryptographic signature, so a token is accepted without its signature being fully verified. This could allow an attacker to join an organization without a valid invitation.

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow arbitrary code execution by the management service in certain non-default configurations due to improper control of code generation. Customization content may be evaluated as code where the related feature is enabled and not properly restricted.

IBM API Connect versions 12.1.0.0 through 12.1.0.3 use default credentials, which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.