The first flaw supplies the authentication the second one requires. A pair of medium problems is not a medium problem.
The same operators, the same product category, four months before MOVEit. The rehearsal nobody treated as one.