Vulnerability in Truesec Lapswebui

CVE-2025-15552

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

EPSS: 0.000 (4.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References