CVE-2023-27132: Critical severity tsplus remote work vulnerability
Published Oct 17, 2023
·Updated
TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product.
Affected Software
1 affected component
TSplus TSplus Remote Work<=16.0.0.0
Event History
Oct 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
04:15 PM
Description
Frequently Asked Questions
1
What is CVE-2023-27132?
CVE-2023-27132 refers to a vulnerability in TSplus Remote Work 16.0.0.0 that exposes a cleartext password in the HTML source code.
2
How severe is CVE-2023-27132?
CVE-2023-27132 has a severity rating of 9.8 (critical).
3
Which software versions are affected by CVE-2023-27132?
CVE-2023-27132 affects TSplus Remote Work version 16.0.0.0.
4
What is the CWE category for CVE-2023-27132?
CVE-2023-27132 is categorized under CWE-522 (Insufficiently Protected Credentials).
5
Is there a reference for more information about CVE-2023-27132?
For more information about CVE-2023-27132, refer to the following link: [link](https://packetstormsecurity.com/files/174271).