U.S. Dept Of Defense disclosed a bug submitted by 0r10nh4ck: https://hackerone.com/reports/2090435 [Source]