A vulnerability was found in Truesec LAPSWebUI up to 2.3. It has been classified as problematic. The impacted element is an unknown function of the component Admin Password Handler. Performing a manipulation results in use of web browser cache containing sensitive information.

This vulnerability is reported as CVE-2025-15554. The attack requires a local approach. No exploit exists.

Upgrading the affected component is recommended.