Design/Logic Flaw

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...

CVE-2016-3012

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...

CVE-2016-3012: Exposure of Sensitive Information to an Unauthorized Actor

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...

PT-2016-5332

Name of the Vulnerable Software and Affected Versions IBM API Connect aka APIConnect versions prior to 5.0.3.0 Description The issue allows remote attackers to bypass intended access restrictions by leveraging knowledge of internal server credentials included in the software package...