Misconfigured settings in IITB SSO v1.1.0 allow attackers to access sensitive application data.
CWE-284