Critical severity · published Sep 11, 2023
CVE-2023-31069
An issue was discovered in TSplus Remote Access through 16.0.2.14
9.8
CVSS
3.7%
EPSS
No
On KEV
Description
An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Tsplus Remote Work · Tsplus
through 16.0.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-31069
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-31069
Third Party Advisory
http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html
Third Party Advisory
https://www.exploit-db.com/exploits/51681
More from Tsplus Remote Work
9.8
CVE-2023-27132
TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal
9.8
CVE-2023-27133
TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder
9.8
CVE-2023-31068
An issue was discovered in TSplus Remote Access through 16.0.2.14