IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.Referenceshttp://www.ibm.com/support/docview.wss?uid=ibm10874248https://exchange.xforce.ibmcloud.com/vulnerabilities/156544http://www.securityfocus.com/bid/107559