An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository.
References
Configurations
No configuration.
History
21 Nov 2024, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/aaravavi/TVS-Connect-Application-VAPT - | |
| References | () https://github.com/aaravavi/TVS-Connect-Application-VAPT/tree/main - | |
| References | () https://github.com/msn-official/CVE-Evidence - |
06 Aug 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
05 May 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sensitive information via an insecure API endpoint. NOTE: this is disputed as discussed in the msn-official/CVE-Evidence repository. | |
| References |
|
30 Apr 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-30 15:15
Updated : 2024-11-21 09:16
NVD link : CVE-2024-33309
Mitre link : CVE-2024-33309
CVE.ORG link : CVE-2024-33309
JSON object : View
Products Affected
No product.
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor