Skip to main content

Planet Fitness Workouts

1 CVEs product

Monthly

CVE-2024-43201 Sep 23, 20:15 HIGH POC This Week

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive. Rated high severity (CVSS 8.7), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Google Apple Planet Fitness Workouts
NVD
CVSS 4.0
8.7
EPSS
0.4%
EPSS 0% CVSS 8.7
HIGH POC This Week

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive. Rated high severity (CVSS 8.7), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Google Apple +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy