A remote authenticated attacker can bypass the two‑factor authentication in IBM webMethods Integration Server 12.1. The flaw is an improper authentication weakness, allowing the attacker to gain full control of the integration platform without additional credentials. This can compromise confidentiality, integrity, and availability, and may enable further lateral movement within the environment.

IBM webMethods Integration Server version 12.1 is affected.

The CVSS score of 8.8 indicates a high severity vulnerability. The attack requires an authenticated session and may be performed by a remote adversary. While no EPSS score is available and the vulnerability is not listed in CISA KEV, the high CVSS score and the nature of the flaw suggest a significant risk if attackers obtain valid credentials. Exploitation involves bypassing the two‑factor authentication mechanism, enabling the attacker to execute privileged actions and potentially compromise other services.