The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to insecure ticket authentication. A remote attacker can use timing attack to potentially bypass authentication process and gain unauthorized access to the application.