IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that allows a remote attacker to bypass authentication and access sensitive information by sending a crafted unauthenticated request. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity. There is no information about available patches or vendor advisories confirming remediation status.