Oracle Identity Manager contains an authentication bypass vulnerability in its REST WebServices component. An attacker can gain unauthorized access to administrative endpoints. Successful exploitation allows complete takeover of the system, compromising all managed identities and access controls.