Dude couldn't exploit it for much, despite being able to takeover/access any account, and everything was in the cloud.
Ah, here's a writeup!
https://www.securityfocus.com/news/10271
Dude couldn't exploit it for much, despite being able to takeover/access any account, and everything was in the cloud.