Full Disclosure: JitBit Helpdesk Authentication Bypass 0-Day

This report describes an authentication bypass in JitBit Help Desk Software v8.9.11: the password-reset "AutoLogin" link includes a userHash based on an application shared secret that is generated using System.Random with an Environment.TickCount seed. An attacker can brute-force the RNG seed (2^32 space) to recover the shared secret, compute valid userHash values (including a non-expiring variant), and automatically authenticate as any user (including admin). The author provides a PoC and recommends replacing the generated shared secret with a securely produced value as a short-term mitigation.