IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.
[
{
"product": "API Connect",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "5.0.7.0"
},
{
"status": "affected",
"version": "5.0.7.1"
},
{
"status": "affected",
"version": "5.0.7.2"
},
{
"status": "affected",
"version": "5.0.8.0"
},
{
"status": "affected",
"version": "5.0.8.1"
}
]
}
]