WebSphere Application Server APAR#: PQ46615 Defect#: 93018 WebSphere Release: 3.5.2 and 3.5.3 Abstract: Userid with null password passed into request_login picks up server creds Installation: 1. Stop all running WebSphere processes. 2. Copy PQ46615.jar to a directory, such as WebSphere\AppServer\efix 3. Add the directory/jar file to the beginning of the admin server's classpath e.g. WebSphere\AppServer\bin\admin.config : com.ibm.ejs.sm.adminserver.classpath=C:/WebSphere/AppServer/efix/PQ46615.jar;C:/WebSphere.... 3. Restart WebSphere