Description (CNA)
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Truesec / LAPSWebUI | affected 0 before 2.4; unaffected 2.4 |
CWE
CWE-525
References
- https://labs.reversec.com/advisories/2026/03/admin-passwords-cached-by-browsers-in-truesec-lapswebui
ADP enrichment
No English description supplied.
No references supplied.