QiHang Media Web Digital Signage 3.0.9 Password Disclosure
Posted by deepcore on August 14, 2020 – 4:59 am
QiHang Media Web Digital Signage version 3.0.9 suffers from a cleartext transmission/storage of sensitive information in a cookie. This allows a remote attacker to intercept the HTTP Cookie authentication credentials via a man-in-the-middle attack.
Post a reply
You must be logged in to post a comment.