Vulnerabilidades do Guangzhou Yeroo Tech Co., Ltd. iDS6 DSSPro Digital Signage System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Guangzhou Yeroo Tech Co., Ltd. iDS6 DSSPro Digital Signage System: 1 registro(s), com versões afetadas e correções.

CVE-2020-36917 Alta · 7.5 CWE-319 06/01/2026

iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie

iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.