CVE-2023-27132

CRITICAL 9.8CVE-2023-27132 · Published 17/10/2023 · updated 17/06/2026

In short

CVE-2023-27132 is a CRITICAL (CVSS 9.8) vulnerability affecting tsplus remote work (tsplus).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tsplus remote work tsplus	`≤ 16.0.0.0`	No fix yet

Description

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product.

References

packetstormsecurity.com/files/174271 · Exploit

More vulnerabilities in tsplus remote work

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free