It's possible to bypass protection by using replay attacks.
vulners.com/securityvulns/securityvulns:doc:13320