IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability that allows identity spoofing attacks. This security flaw could potentially allow attackers to impersonate legitimate users or systems within the application server environment. The vulnerability affects two major versions of the widely-used enterprise application server platform. IBM has acknowledged the issue and provided advisory information through their support pages. Organizations running affected versions should review the security advisory for mitigation steps.