CVE-2024-39886

creationtimestamp| type| source ---|---|--- 2024-07-10 09:39:21+00:00| seen| https://t.me/cvedetector/518...

CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...

CVE-2024-39886

The TONE store App (provided by DREAM TRAIN INTERNET INC.) versions 3.4.2 and earlier is vulnerable to a cleartext transmission issue (CWE-419 ) when communicating with the TONE store website. This unprotected primary channel allows a man-in-the-middle (MITM) attack, where an adversary could inte...