Multiple Vulnerabilities in IBM API Connect

Summary

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.

Remediation

1. Inventory every IBM API Connect deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Patchhttps://www.ibm.com/support/pages/node/7295635