SAML authentication bypass vulnerability disclosure
kb.cert.org