IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 137031.
https://exchange.xforce.ibmcloud.com/vulnerabilities/137031
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-10804