CVE-2020-36914: QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure

Published Jan 6, 2026

Updated

QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote attackers to intercept user authentication credentials through cleartext cookie transmission. Attackers can perform man-in-the-middle attacks to capture and potentially misuse stored authentication credentials transmitted in an insecure manner.

Affected Software

1 affected component

QiHang Media Web Digital Signage

Event History

Jan 6, 2026

CVE Published

via MITRE·03:53 PM

Data Sourced

via MITRE·03:53 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-36914?

CVE-2020-36914 has a medium severity rating due to its sensitive information disclosure potential.

How do I fix CVE-2020-36914?

To fix CVE-2020-36914, implement secure cookie transmission by enabling HTTPS and using secure and HttpOnly cookie flags.

What information is vulnerable in CVE-2020-36914?

CVE-2020-36914 exposes user authentication credentials through cleartext cookie transmission.

Who is affected by CVE-2020-36914?

Users of QiHang Media Web Digital Signage version 3.0.9 are affected by CVE-2020-36914.

Can CVE-2020-36914 lead to more severe attacks?

Yes, CVE-2020-36914 can enable man-in-the-middle attacks, potentially allowing attackers to capture sensitive information.