Insecure Permissions in TSplus Remote Access by TSplus
CVE-2025-26318

5.8MEDIUM

Key Information:

Vendor

Tsplus

Status
Tsplus Remote Access
Vendor
CVE Published:
4 March 2025

What is CVE-2025-26318?

The TSplus Remote Access software version 17.30 contains a vulnerability due to insecure permissions, which can be exploited by attackers. This allows malicious actors to enumerate all domain accounts that are currently connected to the application, potentially leading to unauthorized access to sensitive information and resources. Properly securing the application against such vulnerabilities is crucial to protect against unauthorized account visibility.

Affected Version(s)

TSplus Remote Access 0 < 17.30

References

https://github.com/Frozenka/CVE-2025-26318

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.