Optimidoc Server
Monthly
OptimiDoc Server (On-Premise) exposes cleartext credentials for integrated external services - SMTP, FTP, Active Directory, and SharePoint - directly in the HTML page source of the web administration panel. Any authenticated administrator who views the configuration pages can read these stored passwords without any additional steps. Fixed in version 26.08 per CERT-PL advisory; no public exploit or KEV listing at time of analysis.
OptimiDoc Server (On-Premise) exposes cleartext credentials for integrated external services - SMTP, FTP, Active Directory, and SharePoint - directly in the HTML page source of the web administration panel. Any authenticated administrator who views the configuration pages can read these stored passwords without any additional steps. Fixed in version 26.08 per CERT-PL advisory; no public exploit or KEV listing at time of analysis.