iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass
Posted by deepcore on November 6, 2020 – 7:06 pm
The CAPTCHA function for iDS6 DSSPro Digital Signage System version 6.2 is prone to a security bypass vulnerability that occurs in the CAPTCHA authentication routine. By requesting the autoLoginVerifyCode object an attacker can receive a JSON message code and successfully bypass the CAPTCHA-based authentication challenge and perform brute-force attacks.
Post a reply
You must be logged in to post a comment.