Vulnerability Bulletins

CVE-2017-8058

   
Affected software ATLASSIAN
 
Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2017-8058