CVE-2020-36914

Publication date

2026-01-06 15:53:22

Family

VulnCheck

State

PUBLISHED

Description

QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept user authentication credentials through cleartext cookie transmission. Attackers can perform man-in-the-middle attacks to capture and potentially misuse stored authentication credentials transmitted in an insecure manner.