IBM WebSphere Portal 7.0 8.0 8.5 and 9.0 may fail to set the correct user context in certain impersonation scenarios which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.