IBM WebSphere Application Server versions 8.5, 9.0, and Liberty versions 17.0.0.3 through 26.0.0.7 have a vulnerability that could allow a remote attacker to bypass security constraints. This issue affects both Traditional and Liberty editions. The vulnerability is classified under CWE-289, indicating improper authentication. No specific patch or remediation information is provided in the available data.