XM-hell strikes single-sign-on systems: Bugs allow miscreants to masquerade as others

Yeah, I'm so totally Sarah from accounts"

Various single-sign-on systems can be hoodwinked to allow miscreants to log in as strangers without their password, all thanks to bungled programming."