I haven’t really had much to do with ultralights.
But I can throw some stuff at you to answer and consider?
Most importantly.
What sort of diagnostic tools do you have available to you?
Proxmark3
FlipperZero
With these, If you have access to the system that set the card up, you may be able to sniff the password?
You may be able to ask the system admin if they know. Unlikely, but if they have access to the program, they may be able find it in the setup side.
If you have Android / iPhone, we could have a look at the card dump for you, but we wont be able to decipher the password, but there are a few other things that could be of use to help see if it actually has a password, what block, is it write protected etc.
hopefully, thats enough for you to start with