Vulnerabilities in Credentials Binding