CVE-2025-15552 — Long Session Lifetime in Truesec LAPSWebUI

CVE-2025-15552

Long Session Lifetime in Truesec LAPSWebUI PUBLISHED

Description (CNA)

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

Affected (CNA)

Vendor / product	Versions
Truesec / LAPSWebUI	affected 0 before 2.4; unaffected 2.4

CWE

CWE-613

References

https://labs.reversec.com/advisories/2026/03/long-session-lifetime-in-truesec-lapswebui

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.