TSplus Remote Access vulnerabilities
3 known vulnerabilities in TSplus Remote Access from TSplus. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
TSplus Remote Access: Missing Critical Step in Authentication
Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does
- 8.7 High severity
TSplus Remote Access: Files or Directories Accessible to External Parties
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restr
- 9.8 Critical severity
Tsplus Remote Access: Incorrect Default Permissions
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.