The author of this Medium post also posted about this back in January[1] so the issue hasn't been resolved since then?
[1] https://medium.com/@logicbomb_1/bugbounty-nasa-internal-user...
[1] https://medium.com/@logicbomb_1/bugbounty-nasa-internal-user...