IBM WebSphere Application Server versions 8.5 and 9.0 contain a missing authorization vulnerability (CWE-862) that could allow a remote attacker to bypass authentication on an admin console servlet. This flaw permits unauthorized access to administrative interfaces, potentially leading to partial confidentiality and integrity loss and high availability impact. The CVSS 3.1 vector indicates the attack requires adjacent network access with high attack complexity and no privileges or user interaction needed.

Successful exploitation could allow an attacker to bypass authentication controls on the admin console servlet, potentially leading to unauthorized administrative access. The CVSS score reflects limited confidentiality and integrity impact but a high impact on availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor IBM advisories for updates and apply any official fixes once available.