CVE-2020-36888

Publication date

2025-12-10 20:51:15

Family

VulnCheck

State

PUBLISHED

Description

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the servers error responses.