CVE-2025-26318: Medium severity TSplus Remote Access vulnerability
hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26318?
CVE-2025-26318 is considered a high-severity vulnerability due to its potential to expose sensitive information about domain accounts.
How do I fix CVE-2025-26318?
To fix CVE-2025-26318, ensure that permissions for accessing domain account information are properly configured and restrict access to authorized users only.
What are the potential impacts of CVE-2025-26318?
The potential impacts of CVE-2025-26318 include unauthorized access to sensitive information about connected domain accounts.
Which versions of TSplus Remote Access are affected by CVE-2025-26318?
CVE-2025-26318 affects TSplus Remote Access version 17.30 and potentially earlier versions.
Who can exploit CVE-2025-26318?
CVE-2025-26318 can be exploited by attackers with network access to the affected TSplus Remote Access application.