Showing Articles About
lapswebui
-
Laban Sköllermark - 16 Mar 2026
Three Confirmed Vulnerabilities in Truesec LAPSWebUI
On a client engagement Reversec found LAPSWebUI by Truesec in use for handling Windows users' local administrator passwords. Several vulnerabilities were found and reported to the vendor, which has addressed all of them in version 2.4 released in January 2026.
- Laban Sköllermark
- 16 Mar 2026
- Severity: Low
Admin Passwords Cached by Browsers in Truesec LAPSWebUI
- Laban Sköllermark
- 16 Mar 2026
- Severity: Medium
Insecure Logout Functionality in Truesec LAPSWebUI
- Laban Sköllermark
- 16 Mar 2026
- Severity: Medium