Vulnerabilidades de Guangzhou Yeroo Tech Co., Ltd.
CVEs publicadas que afetam produtos de Guangzhou Yeroo Tech Co., Ltd.: 1 registro(s), com severidade, exploração e correções.
CVE-2020-36917
Alta · 7.5
CWE-319 06/01/2026
iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.