Vulnerabilities in Credentials Binding 1.2