IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that allows a remote attacker to inject forged entries into the server's administrative log. This flaw could be exploited without authentication and requires low attack complexity. The vulnerability impacts the integrity of log data but does not affect confidentiality or availability.