CVE-2017-8060

The CVE describes a flaw in Panda Mobile Security for iOS 1.1 where the app accepts invalid/self-signed TLS certificates, enabling a man-in-the-middle to silently intercept data during the login API call. The connected CNVD/CNVD-related entries corroborate the same vulnerable behavior, focusing o...