The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gotenna_pro | Gotenna | * | 1.6.1 (including) |
| Gotenna_pro | Gotenna | * | 2.0.3 (excluding) |