Truesec Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with LAPSWebUI.

Products

Clear product

Showing 3 vulnerabilities on this page for LAPSWebUI

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Admin Passwords Cached by Browsers in Truesec LAPSWebUI

Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.

CWE-525Mar 16, 2026
CVSS6.0v4.0EPSS0.145%PoCs0SignalsSTIX

Insecure Logout Functionality in Truesec LAPSWebUI

Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CWE-613Mar 16, 2026
CVSS6.0v4.0EPSS0.107%PoCs0SignalsSTIX

Long Session Lifetime in Truesec LAPSWebUI

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

CWE-613Mar 16, 2026
CVSS6.0v4.0EPSS0.109%PoCs0SignalsSTIX