CVE-2025-13175

The record

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ 6 in versions before MU106.

Affected packages

Related vulnerabilities

• CVE-2026-3314 Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops… CWE-549
• CVE-2025-42904 Due to an Information Disclosure vulnerability in Application Server ABAP, an… CWE-549
• GHSA-c978-wq47-pvvw sudo-rs: Partial password reveal is possible after timeout CWE-549
• CVE-2025-64170 sudo-rs is a memory safe implementation of sudo and su written in Rust. CWE-549