CVE-2017-8059 Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently i...
HighCVSS 8.1
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password), in addition to the static authentication token if the user is already logged in.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware foxit pdf | = 5.2.1 | No fix listed |
| foxitsoftware foxit pdf | = 5.3.2 | No fix listed |