Lucene search
+L

7 matches found

OSV
OSV
added 2024/09/23 8:15 p.m.1 views

CVE-2024-43201

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 released on 2024-07-25 a...

5.9CVSS5.8AI score0.00403EPSS
SaveExploits1References2
NVD
NVD
added 2024/09/23 8:15 p.m.14 views

CVE-2024-43201

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 released on 2024-07-25 a...

8.8CVSS0.00403EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/09/23 7:11 p.m.17 views

CVE-2024-43201 Planet Fitness Workouts mobile apps do not properly validate TLS certificates

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 released on 2024-07-25 a...

8.8CVSS0.00403EPSS
SaveExploits1References2
CVE
CVE
added 2024/09/23 7:11 p.m.55 views

CVE-2024-43201

The CVE-2024-43201 entry covers the Planet Fitness Workouts mobile apps (iOS/Android) with an improper TLS certificate validation vulnerability. The underlying issue allows an attacker with network access to obtain session tokens and sensitive information from affected apps. The vulnerability aff...

8.8CVSS5.7AI score0.00403EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/23 7:11 p.m.14 views

CVE-2024-43201 Planet Fitness Workouts mobile apps do not properly validate TLS certificates

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 released on 2024-07-25 a...

8.8CVSS5.7AI score0.00403EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.7 views

PT-2024-30367 · Planet Fitness · Planet Fitness Workouts

Name of the Vulnerable Software and Affected Versions: The Planet Fitness Workouts iOS and Android mobile apps versions prior to 9.8.12 Description: The issue is related to the failure of the Planet Fitness Workouts iOS and Android mobile apps to properly validate TLS certificates. This allows an...

8.8CVSS6.6AI score0.00403EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/09/23 12:0 a.m.4 views

Planet Fitness Workouts 信任管理问题漏洞

Planet Fitness Workouts is a fitness-related application from Planet Fitness. A trust management issue vulnerability exists in Planet Fitness Workouts versions prior to 9.8.12 that stems from a failure to properly validate TLS certificates. An attacker could exploit the vulnerability to obtain...

8.8CVSS6.5AI score0.00403EPSS
SaveExploits1References3
Rows per page
Query Builder