Vulnerabilities

TI-2023-11941 CVE-2023-27133 · GHSA-m4g4-hvch-vhgf

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the…

HIGH 82

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2023-10-17 No fix listed CWE-276

TI-2023-11940 CVE-2023-27132 · GHSA-8c9g-7c4g-j7x7

HIGH 82

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0106 Published 2023-10-17 No fix listed CWE-522

TI-2023-14796 CVE-2023-31069 · GHSA-xcff-9rfc-c4h6

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03686 Published 2023-09-11 No fix listed CWE-312

TI-2023-14795 CVE-2023-31068 · GHSA-gx37-4cw7-q8m8

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05421 Published 2023-09-11 No fix listed CWE-276