CVE Vulnerabilities

CVE-2025-13175

Missing Password Field Masking

Published: Jan 14, 2026 | Modified: Jan 14, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ 6 in versions before MU106.

Weakness

The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.

Potential Mitigations

References