CNNVD-202601-2454 Information

CNNVD ID

CNNVD-202601-2454

CVE-2025-13175

  • CNNVD Published: 2026-01-14

Description (Chinese)

Y Soft SafeQ是捷克Y Soft公司的一个打印管理软件。 Y Soft SafeQ 6 MU106之前版本存在安全漏洞,该漏洞源于Workflow Connector密码字段的呈现方式允许具有UI访问权限的管理员使用浏览器开发者工具查看密码值。

Description (English)

Y Soft SafeQ is a printing management software for Czech Y Soft. The previous version of Y Soft SafeQ 6 MU106 had a security loophole, which originated in the presentation of the WorldFlow Contractor password field, which allowed administrators with UI access access to view password values using the browser developer tool.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Y Soft

Published

2026-01-14

Last Modified

2026-02-24

References

https://cert.pl/en/posts/2026/01/CVE-2025-13175 https://docs.ysoft.cloud/safeq6/latest/safeq6/release-notes-build-106 https://www.ysoft.com/safeq

Patch

https://www.ysoft.com/safeq

Share on: