Authentication Bypass
cipher.googlepam is vulnerable to authentication bypass because it uses the same cache key for all users. When one user logs in successfully, others could not log in using their own passwords. But the first user could now use his password to log in as anyone else...