CVE-2020-13805: 
NixOS vulnerability analysis and mitigation

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2 related to brute-force attack mishandling. The vulnerability exists because the CAS service lacks a limit on login failures (CVE Details, NVD).

The vulnerability has been assigned CVE-2020-13805 and affects Foxit Reader and PhantomPDF versions prior to 9.7.2. The issue stems from the CAS (Central Authentication Service) implementation which does not implement proper login attempt limitations, making it susceptible to brute-force attacks (CVE Details).

The vulnerability allows attackers to perform unlimited login attempts against the CAS service, potentially leading to unauthorized access through brute-force attacks (CVE Details).

The vulnerability is exploitable through brute-force attacks against the CAS service authentication mechanism. No specific exploit code or confirmation of exploitation in the wild has been publicly reported (CVE Details).

Users should upgrade to Foxit Reader and PhantomPDF version 9.7.2 or later to address this vulnerability. The update implements proper login attempt limitations in the CAS service (Foxit Security).