IBM WebSphere Application Server versions 9.0 and 8.5 contain an authentication bypass vulnerability in the SOAP/JMX connector. This flaw allows an unauthenticated attacker to bypass authentication controls and potentially gain limited access. The vulnerability has a medium severity rating with a CVSS 3.1 base score of 5.3. No patch or vendor advisory information is currently available.