High severity8.1NVD Advisory· Published May 5, 2017· Updated May 13, 2026
CVE-2017-8059
CVE-2017-8059
Description
Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password), in addition to the static authentication token if the user is already logged in.
Affected products
2cpe:2.3:a:foxitsoftware:foxit_pdf:5.2.1:*:*:*:*:iphone_os:*:*+ 1 more
- cpe:2.3:a:foxitsoftware:foxit_pdf:5.2.1:*:*:*:*:iphone_os:*:*
- cpe:2.3:a:foxitsoftware:foxit_pdf:5.3.2:*:*:*:*:iphone_os:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.