CVE-2017-8060

CVE-2017-8060 describes a vulnerability in Panda Mobile Security 1.1 for iOS, where the application improperly accepts invalid or self-signed TLS certificates. This flaw allows a man-in-the-middle or physically proximate attacker to silently intercept sensitive information exchanged during the login API call. Rated as Medium severity (CVSS 5.9), the attack has high confidentiality impact but requires high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.