Microsoft Active Directory Federation Services information leakage

It's possible to access closed session...