← Database

CVE-2025-15552

HIGH CVSS: 7.8 Published: 2026-03-16 Modified: 2026-06-17

Description

Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

Affected Platforms

Truesec Lapswebui

Weakness Type

CWE-613

References