CyberRota Analysis
AI-GeneratedA critical authorization bypass vulnerability exists in Idvlabs Software and Consulting Services Inc. Ontime, allowing attackers to exploit trusted identifiers due to user-controlled keys. This flaw can lead to unauthorized access to sensitive data and functionalities, making it imperative for organizations using Ontime to prioritize immediate remediation efforts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026.