CVE-2025-15553

Published: Mar 16, 2026

Modified: Mar 16, 2026

PUBLISHED

Description

Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.

Vendor	Product	Versions
Truesec	LAPSWebUI	affected `0 - < 2.4` unaffected `2.4`

Weaknesses (CWE)

CWE-613

References

https://labs.reversec.com/advisories/2026/03/insecure-logout-functionality-in-truesec-lapswebui

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-15553

Description

Affected Products

Weaknesses (CWE)

References