CVE-2024-45838CWE-319

goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information

Low · published September 26, 2024

CVSS v4.0
2.3
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It

is advised to not use sensitive information in callsigns when using this

and previous versions of the plugin. Update to current plugin version

which uses AES-256 encryption for callsigns in encrypted operation

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00090 · 0.4th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-09-26T17:31Z
EPSS history
Timeline
  • 26 SEP 17:31Z
    goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information
    cvelistv5