Read the docs

Truesec

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Truesec records in CISA KEV

No Truesec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Lapswebui · all components

Priority MEDIUM 60

Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00154 Published 2026-03-16 Fixed in 2.4 CWE-525
Priority MEDIUM 60

Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00114 Published 2026-03-16 Fixed in 2.4 CWE-613
TI-2025-14191 CVE-2025-15552 · GHSA-xqrw-v83c-fjpf

Long Session Lifetime in Truesec LAPSWebUI

Priority LOW 26

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00115 Published 2026-03-16 Fixed in 2.4 CWE-613
Open these records in search →