It has been repedately demonstrated that it is possible to get private key from the server using this vulnerability, as well as user login details. You don't ha

It has been repedately demonstrated that it is possible to get private key from the server using this vulnerability, as well as user login details. You don't have only one shot - you can query the server multiple times (and every time you will receive slightly different data) until you have everything you want. So yeah, the issue was/is very serious.