CVE-2020-36917
HIGH
7.5
CVSS Severity Score
Vulnerability Description
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.
Affected Platforms (CPE)
No CPE configurations currently published for this record.