Description
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Truesec | LAPSWebUI | < 2.4 | 2.4 |