IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that could allow a remote attacker to bypass authentication on an administrative console servlet. This flaw could lead to unauthorized access with potential impact on confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a medium severity level.