CVE-2025-13175

Publication date

2026-01-14 12:19:06

Family

CERT-PL

State

PUBLISHED

Description

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ 6 in versions before MU106.