CVE-2018-21237: 
Foxit PhantomPDF vulnerability analysis and mitigation

An issue was discovered in Foxit PhantomPDF before 8.3.7 that allows NTLM credential theft via a GoToE or GoToR action (MITRE CVE, NVD CVE). The vulnerability was disclosed on June 4, 2020, and affects all versions of Foxit PhantomPDF prior to version 8.3.7.

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (MEDIUM) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, and a CVSS v2.0 base score of 5.0 (MEDIUM) with vector string (AV:N/AC:L/Au:N/C:P/I:N/A:N). The vulnerability is classified under CWE-522 (Insufficiently Protected Credentials) (NVD CVE).

The vulnerability allows attackers to perform NTLM credential theft through GoToE or GoToR actions in PDF documents. This could lead to unauthorized access to user credentials and potential compromise of user accounts (NVD CVE).

The vulnerability can be exploited remotely without requiring authentication or user interaction. The attack complexity is considered low, making it relatively straightforward for attackers to exploit (NVD CVE).

Users should upgrade to Foxit PhantomPDF version 8.3.7 or later to address this vulnerability. The fix is available through the vendor's security bulletin (Vendor Advisory).