The vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2 permits a remote attacker to obtain sensitive credentials and manipulate the tool’s responses due to improper certificate validation. This flaw can enable unauthorized access to authentication data and alter the behavior of the API gateway, potentially exposing protected resources or redirecting traffic.

The affected product is IBM API Connect, specifically releases from 12.1.0.0 up to 12.1.1.2. Systems running any of these versions are at risk if they rely on the default certificate validation mechanism without additional safeguards.

The CVSS score of 6.8 reflects moderate severity, and the absence of an EPSS score suggests that widespread exploitation has not been observed yet. The vulnerability is not listed in CISA’s KEV catalog. Attackers would need network access to an exposed instance of API Connect and would exploit the weak certificate validation to retrieve credentials or modify responses. Because the flaw is due to improper certificate handling, an adversary could inject or intercept secure traffic if they control or manipulate the TLS handshake.