Ontime vulnerabilities

Ontime improperly restricts excessive authentication attempts, enabling brute force attacks. The issue affects versions through 2026-10-27; the vendor did not respond to the disclosure.

An authorization bypass vulnerability in Ontime through a user-controlled key allows exploitation of trusted identifiers. Affects versions up to 04052026.

An authorization bypass vulnerability in Ontime allows exploitation of trusted identifiers through a user-controlled key. The issue affects versions up to 04052026.