The worrying vulnerability didn't require a sophisticated hack, and it would have allowed nefarious actors to issue their own ...