IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request. This could lead to unauthorized access with potential impact on confidentiality, integrity, and availability of the affected system.