Description
Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Truesec | LAPSWebUI | < 2.4 | 2.4 |