Authentication Bypass via Information Disclosure in HTTP Headers

Hello guys, after a while, sharing another simple but interesting writeup…This time, the bug was not a password issue.