← Back

CVE-2024-11206

nvd nist
Published: Nov 14, 2024Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.

Related CWEs

CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (2)

Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea
Source: 907edf6c-bf03-423e-ab1a-8da27e1aa1ea

Timeline

No history available yet.