Description (CNA)
Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ 6 in versions before MU106.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| YSoft / SafeQ 6 | affected 0 before MU106 |
CWE
CWE-549
References
- https://www.ysoft.com/safeq
- https://docs.ysoft.cloud/safeq6/latest/safeq6/release-notes-build-106
- https://cert.pl/en/posts/2026/01/CVE-2025-13175
ADP enrichment
No English description supplied.
No references supplied.