Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 6.5
Описание
The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal information about the users and can also be leveraged for other vulnerabilities.
The goTenna pro series does not encrypt the callsigns of its users. These callsigns reveal information about the users and can also be leveraged for other vulnerabilities.
Связанные уязвимости
CVSS3: 4.3
nvd
больше 1 года назад
The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using this and previous versions of the app and update your app to the current app version which uses AES-256 encryption for callsigns in encrypted operation.