CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel

Low · published July 10, 2024

CVSS v3.1
3.7
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Published
2024-07-10T06:41Z
EPSS history
Timeline
  • 10 JUL 06:41Z
    TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel
    cvelistv5