CVE-2017-8058

CVE-2017-8058 describes a vulnerability in Atlassian HipChat for iOS versions prior to 3.16.2, where the application improperly accepts invalid or self-signed TLS certificates. This flaw allows a man-in-the-middle or physically proximate attacker to silently intercept sensitive login information. Rated as Medium severity (CVSS 5.9), the vulnerability requires high attack complexity but can lead to high confidentiality impact without user interaction. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.