Tennessee Valley Authority: access to profile & reset password page without authentication

Vulnerability description not provided...