https://kennisbank.assistsec.nl/kwetsbaarheden/broken-authentication