This vulnerability in Arraytics Timetics allows an attacker with some level of privileges to bypass authentication mechanisms by exploiting an alternate path or channel in the application. The affected versions include all releases up to and including 1.0.46. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to authentication bypass, allowing attackers to gain unauthorized access to the system with potentially high impact on confidentiality, integrity, and availability. This could result in full system compromise or unauthorized actions within the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or mitigation is currently available, organizations should monitor vendor communications closely. Until a fix is released, consider restricting network access to the affected application and applying compensating controls where possible.