U.S. Dept Of Defense disclosed a bug submitted by pwnesec: https://hackerone.com/reports/1887996 [Source]