CVE-2025-26318CWE-201

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application

Medium · published March 4, 2025

CVSS v3.1
5.8
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-03-04T00:00Z
EPSS history
Timeline
  • 04 MAR 00:00Z
    hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application
    cvelistv5