Logged into other people's accounts security flaw

So you were able to do actions on behalf as other users when this bug occured?