The vulnerability exists in the /cas/login endpoint of sso-master v1.0.0, where an attacker can bypass authentication by submitting a specially crafted POST request. This flaw allows authentication without providing a valid password, potentially granting unauthorized access to the application. No further technical details, such as exploitation methods or impact scope, are provided. No official remediation or patch information is available at this time.

Successful exploitation of this vulnerability allows an attacker to authenticate to the sso-master application without valid credentials, potentially leading to unauthorized access to protected resources. The exact impact depends on the privileges granted upon authentication but could include data exposure or manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /cas/login endpoint where possible and monitor for suspicious POST requests targeting this endpoint.