The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.
CWE-295