Vulnerabilities > Foxitsoftware > Foxit PDF > High

DATE CVE VULNERABILITY TITLE RISK
2017-05-05 CVE-2017-8059 Improper Certificate Validation vulnerability in Foxitsoftware Foxit PDF 5.2.1/5.3.2
Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password), in addition to the static authentication token if the user is already logged in.
network
high complexity
foxitsoftware CWE-295
8.1