Authentication bypass, information disclosure.
vulners.com/securityvulns/securityvulns:doc:32510
vulners.com/securityvulns/securityvulns:doc:32597