QiHang Media Web Digital Signage version 3.0.9 suffers from a cleartext transmission/storage of sensitive information in a cookie. This allows a remote attacker to intercept the HTTP Cookie authentication credentials via a man-in-the-middle attack.
f96d7582f9ecb335fe5d16e815d27894b4e9b1b96bd020918ef5c8ab3bea047c