CVE-2025-15553 | BDVDB-2026-320644 Detail
TruesecLAPSWebUI
Description#
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.
Impact#
Escalation of Privileges
Weaknesses#
- CWE-613 Insufficient session expiration
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.