# iDS6 DSSPro digital signage system has three flaws, including cleartext credentials

- Date: 2026-01-06
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-36917, CVE-2020-36918, CVE-2020-36920

NVD published 3 vulnerabilities in iDS6 DSSPro Digital Signage System, covering cleartext credentials, CSRF and privilege escalation. In version 6.2, a sensitive information disclosure flaw lets remote attackers intercept authentication credentials through cleartext cookies.

## Sources

- [CVE-2020-36917](https://nvd.nist.gov/vuln/detail/CVE-2020-36917) (NIST NVD)
- [CVE-2020-36918](https://nvd.nist.gov/vuln/detail/CVE-2020-36918) (NIST NVD)
- [CVE-2020-36920](https://nvd.nist.gov/vuln/detail/CVE-2020-36920) (NIST NVD)
- [https://cxsecurity.com/issue/WLB-2020110023](https://cxsecurity.com/issue/WLB-2020110023)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/191261](https://exchange.xforce.ibmcloud.com/vulnerabilities/191261)

Page: https://signagelist.org/incidents/2026-01-ids6-dsspro-digital-signage-system-has-three/