I really don't understand the down-voting here. It wouldn't take an experienced security researcher to discover this bug and I think many missed it because they

I really don't understand the down-voting here. It wouldn't take an experienced security researcher to discover this bug and I think many missed it because they assumed such a vulnerability wouldn't exist.