Truesec vulnerabilities
Published CVEs affecting Truesec products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-15554
High · 7.8
CWE-525 Mar 16, 2026
Admin Passwords Cached by Browsers in Truesec LAPSWebUI
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.
CVE-2025-15553
High · 7.1
CWE-613 Mar 16, 2026
Insecure Logout Functionality in Truesec LAPSWebUI
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.
CVE-2025-15552
High · 7.8
CWE-613 Mar 16, 2026
Long Session Lifetime in Truesec LAPSWebUI
Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.