IBM WebSphere Application Server 7.0 8.0 8.5 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote authenticated attacker to obtain sensitive information caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.