CVE-2024-43201
- Reference to the description:
- Description:
- The Planet Fitness Workouts iOS and Android mobile apps prior to version 9.8.12 (released on 2024-07-25) fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information.
- Last updated date:
- 09/30/2024
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 09/30/2024
- Reference url to background