Security Advisory

CVE-2020-36888

5.3
MEDIUM

Vulnerability Description

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.
Published Date December 10, 2025
Official Source NIST NVD Advisory