Known Vulnerabilities in Credentials Binding