CVE-2025-15552 describes an Insufficient Session Expiration vulnerability in Truesec’s LAPSWebUI versions prior to 2.4. This medium-severity flaw (CVSS 6.0) allows an attacker with local access to a workstation to escalate privileges by disclosing the local administrator password, requiring low attack complexity and low privileges. While the vulnerability has a high impact on confidentiality, integrity, and availability, there is currently no evidence of active exploitation, nor are public exploit codes or significant community discussion available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.4CPE matchmatch criteria | cpe:2.3:a:truesec:lapswebui:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.