TSplus Remote Work 16.0.0.0 places a cleartext password on the var pass line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tsplus_remote_work | Tsplus | * | 16.0.0.0 (including) |