~ / search / GHSA-cggm-52qp-wvw7

GHSA-cggm-52qp-wvw7

txAWS AWSServiceEndpoint defaults to not verifying server certificates

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000007

Packages

EcosystemPackageAffectedFixed in
PyPI txaws < 0.4.0 0.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

txAWS fails to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

References

External links from the advisory. They lead to third-party sites.