CVE-2020-35584

CVE-2020-35584 describes a vulnerability in Mersive Solstice Pods prior to version 3.0.3, where the "Browser Look-in" feature allows unencrypted connections to web services. This allows an attacker on the same network to intercept sensitive information, including administrator passwords and screen keys, from legitimate users. The vulnerability has a CVSS score of 5.9 (MEDIUM) due to its network attack vector and high confidentiality impact, though it requires high attack complexity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.