Truesec Lapswebui vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Truesec Lapswebui: 3 record(s), with affected versions and fixes.cpe:2.3:a:truesec:lapswebui
CVE-2025-15554
High · 7.8
CWE-525 Mar 16, 2026
Admin Passwords Cached by Browsers in Truesec LAPSWebUI
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.
CVE-2025-15553
High · 7.1
CWE-613 Mar 16, 2026
Insecure Logout Functionality in Truesec LAPSWebUI
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.
CVE-2025-15552
High · 7.8
CWE-613 Mar 16, 2026
Long Session Lifetime in Truesec LAPSWebUI
Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.