IBM API Connect 10.0.8.0 through 10.0.8.5, and 10.0.11.0 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application.
Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Api_connect | Ibm | 10.0.8.0 (including) | 10.0.8.5 (including) |
| Api_connect | Ibm | 10.0.11.0 (including) | 10.0.11.0 (including) |