iDS6 DSSPro Digital Signage System 6.2 Password Disclosure
Posted by deepcore on November 6, 2020 – 7:06 pm
iDS6 DSSPro Digital Signage System version 6.2 suffers from a cleartext transmission/storage of sensitive information in a cookie when using the Remember (autoSave=true) feature. This allows a remote attacker to intercept the HTTP Cookie authentication credentials via a man-in-the-middle attack.
Post a reply
You must be logged in to post a comment.