CVE-2017-8942

CVE-2017-8942 describes a vulnerability in the YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app for iOS versions 5.3.7 through 5.4.2, where the application fails to properly validate X.509 certificates from SSL servers. This flaw enables man-in-the-middle (MitM) attackers to spoof legitimate servers, potentially leading to the compromise of sensitive user information through crafted certificates. The vulnerability carries a CVSS v3.0 score of 5.9 (Medium), indicating a network-based attack vector with high attack complexity (AC:H) but requiring no user interaction (UI:N). The primary impact is a high confidentiality breach (C:H), as sensitive data could be intercepted. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.