{"id":"CVE-2026-17324","published":"2026-11-07T05:18:42.310","lastModified":"2026-11-07T05:18:42.467","description":"IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access sensitive configuration data and perform unauthorized actions due to missing authentication for a critical function.","cvssScore":8.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7295635","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM API Connect versions 12.1.0.0 through 12.1.1.2 lack authentication on a critical function, allowing unauthenticated remote attackers to access sensitive configuration data and perform unauthorized actions. This is a classic missing authentication vulnerability (CWE-306) that bypasses a fundamental security control.","exploitability":"Exploitation is straightforward for remote attackers with network access to the affected system, requiring no prior access, privileges, or user interaction.","blast_radius":"Successful exploitation could lead to exposure of sensitive configuration secrets (e.g., API keys, credentials) and enable attackers to modify system behavior, potentially compromising data integrity and availability across the API management platform.","remediation":"Upgrade to IBM API Connect 12.1.1.3 or later, which addresses this vulnerability; if upgrading is not immediately feasible, restrict access to the affected endpoint(s) via network segmentation and apply vendor-recommended workarounds pending patching.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","sensitive-data-exposure","api-management","ibm"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:55:46.523Z"}}