IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27 6.1.5 through 6.1.5.3 CF27 7.0.0 through 7.0.0.2 CF29 8.0.0 through 8.0.0.1 CF18 and 8.5.0 before CF08 improperly restricts resource access which allows remote attackers to obtain sensitive information via unspecified vectors as demonstrated by configuration information.