CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...

CVE-2024-39886

CVE-2024-39886 affects TONE store App versions 3.4.2 and earlier. Multiple connected sources confirm a cleartext channel between the TONE store App and the TONE store website, enabling a man-in-the-middle attack to obtain and/or alter communications of the affected app. Root cause is unprotected ...