High severity7.5NVD Advisory· Published Jan 6, 2026· Updated Apr 15, 2026
CVE-2020-36917
CVE-2020-36917
Description
iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept authentication credentials through cleartext cookie transmission. Attackers can exploit the autoSave feature to capture user passwords during man-in-the-middle attacks on HTTP communications.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 6.2
- Range: = 6.2
Patches
Vulnerability mechanics
References
6- cxsecurity.com/issue/WLB-2020110023nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/191261nvd
- packetstormsecurity.com/files/159915nvd
- web.archive.org/web/20200919100215/http://www.yerootech.com/nvd
- www.vulncheck.com/advisories/ids-dsspro-digital-signage-system-cleartext-password-disclosure-via-cookienvd
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5605.phpnvd
News mentions
0No linked articles in our index yet.