Vulnerabilities in Credentials Binding 1.6