Home

CVE-2019-20836

Description

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.017

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Foxit PhantomPDF 8 (ML) 9.4.1.16828Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (EXE) 9.4.1.16828Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (EXE) 9.4.1.16828Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (ML) (MSI) 9.4.1.16828Windows
Multiple vulnerabilities affected in Foxit PhantomPDF 9 (MSI) 9.4.1.16828Windows
Multiple vulnerabilities affected in Foxit PhantomPDF Slim 9.4.1.16828Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-311706Foxit PhantomPDF 8 ML (8.3.12.47136)
PATCH-317726Foxit PhantomPDF 9 (EXE) (9.7.5.29616)
PATCH-317727Foxit PhantomPDF 9 (ML) (EXE) (9.7.5.29616)
PATCH-317728Foxit PhantomPDF 9 (ML) (MSI) (9.7.5.29616)
PATCH-317729Foxit PhantomPDF 9 (MSI) (9.7.5.29616)
PATCH-306313Foxit PhantomPDF (MSI) (8.3.2) (Formerly Foxit PhantomPDF Slim)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234