IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability in the FileTransfer servlet that could allow a remote attacker to obtain sensitive information about the file system. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.