Planet Fitness Workouts
1 CVEs
product
Monthly
The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive. Rated high severity (CVSS 8.7), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Apple
Information Disclosure
Google
Planet Fitness Workouts
NVD
CVSS 4.0
8.7
EPSS
0.4%
EPSS 0%
CVSS 8.7
HIGH
POC
This Week
The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive. Rated high severity (CVSS 8.7), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Apple
Information Disclosure
Google
+1
NVD