id: PYSEC-2017-85
details: txAWS (all current versions) fail to perform complete certificate verification
  resulting in vulnerability to MitM attacks and information disclosure.
affected:
- package:
    name: txaws
    ecosystem: PyPI
    purl: pkg:pypi/txaws
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: 0.0.1
  versions:
  - 0.0.1
  - "0.2"
  - 0.2.1
  - 0.2.3
  - 0.2.3.1
  - 0.3.0
  - 0.3.0.dev0
  - 0.4.0
  - 0.5.0
references:
- type: REPORT
  url: https://github.com/twisted/txaws/issues/24
- type: ADVISORY
  url: https://github.com/advisories/GHSA-cggm-52qp-wvw7
aliases:
- CVE-2017-1000007
- GHSA-cggm-52qp-wvw7
modified: "2021-08-25T04:30:35.998894Z"
published: "2017-07-17T13:18:00Z"