IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 contain a vulnerability that could allow a remote attacker to conduct phishing attacks. The vulnerability is identified as CWE-601, which typically relates to open redirect issues. The CVSS 3.1 base score is 4.3, indicating a medium severity level with network attack vector, low attack complexity, no privileges required, but user interaction is required. No patch or remediation information is provided in the available data.