chain: redirect without exit (CWE-698) leads to resultant authentication bypass.
CVE-2009-3107
product does not restrict access to a listening port for a critical service, allowing authentication to be bypassed.
CVE-2009-1596