U.S. Dept Of Defense disclosed a bug submitted by miguel_santareno: https://hackerone.com/reports/1804174 [Source]