IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576.
https://exchange.xforce.ibmcloud.com/vulnerabilities/129576
http://www.securitytracker.com/id/1039199