IBM WebSphere Application Server versions 9.0 and 8.5 have a vulnerability in the FileTransfer servlet that could allow a remote attacker to obtain sensitive file system information. The vulnerability has a medium severity rating with a CVSS 3.1 base score of 5.3. No specific affected sub-versions or patches are provided in the available data.