IBM API Connect versions 12.1.0.0 through 12.1.1.2 log sensitive user data in plain text, allowing a remote authenticated attacker who can input data into the system to read that data from log files. The vulnerability is a classic example of inadequate log sanitization (CWE-532). The effect is a confidentiality breach where an attacker could access credentials, tokens, or other privileged information stored or transmitted by the application.

The vulnerable software is IBM API Connect, with affected releases ranging from version 12.1.0.0 up to but not including the security‑patched release 12.1.1.3. Systems running those versions on any supported platform should be considered at risk.

The CVSS score of 6.8 indicates a moderate severity. No EPSS score is published, and the vulnerability is not listed in CISA's KEV catalog, which suggests no publicly confirmed exploits yet. Attackers must first authenticate to the API Connect instance, which limits exposure to users with valid credentials. However, once authenticated, the attacker can trigger the logging path and retrieve sensitive information from the logs. The moderate CVSS and lack of exploitation data suggest a non‑critical but still noteworthy risk that merits timely remediation.