IBM WebSphere Application Server versions 8.5 and 9.0 have a vulnerability due to missing authorization checks in the administrative console. This flaw could allow a remote attacker to obtain sensitive information. The vulnerability is rated low severity with a CVSS score of 3.7. No patch or vendor advisory information is currently available regarding remediation.