Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Truesec Clear all filters
TI-2025-14193 CVE-2025-15554 · GHSA-258c-cqq8-pmrp

Admin Passwords Cached by Browsers in Truesec LAPSWebUI

Priority MEDIUM 60

Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00154 Published 2026-03-16 Fixed in 2.4 CWE-525
TI-2025-14192 CVE-2025-15553 · GHSA-qxq9-gf25-f986

Insecure Logout Functionality in Truesec LAPSWebUI

Priority MEDIUM 60

Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00114 Published 2026-03-16 Fixed in 2.4 CWE-613
TI-2025-14191 CVE-2025-15552 · GHSA-xqrw-v83c-fjpf

Long Session Lifetime in Truesec LAPSWebUI

Priority LOW 26

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CVSS 4.0MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00115 Published 2026-03-16 Fixed in 2.4 CWE-613