https://www.systemtek.co.uk/2018/10/apache-syncope-sensitive-security-values-recovery-information-disclosure-vulnerability-cve-2018-1322/