Description
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.
Unscored
CVE-2017-8060
EUVD-2017-17023GHSA-j6j8-v7g3-3x5w
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically prox…
Published May 5, 2017 · Updated Aug 5, 2024 · Assigned by mitre