EUVD-2025-208695

Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords...

CVE-2025-15554

The CVE concerns Truesec LAPSWebUI (before v2.4) where browser caching of LAPS passwords may allow a workstation user to escalate privileges through disclosure of local admin passwords. Affected component: LAPSWebUI; root cause: passwords cached by the browser. Impact: potential local privilege e...