Password is encrypted without using challenge. It makes it possible to replay authentication again.
vulners.com/securityvulns/securityvulns:doc:10858