PT-2023-23132
CVE-2023-31069
·
Published
2023-09-11
·
Updated
2026-03-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TSplus Remote Access versions through 16.0.2.14
Description
An issue was discovered where credentials are stored as cleartext within the HTML source code of the login page.
Recommendations
For versions through 16.0.2.14, consider disabling the login page functionality until a patch is available to prevent cleartext credential exposure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾