https://vulert.com/blog/docker-authentication-bypass-flaw/