1. Home
  2. CVE Database
  3. CVE-2017-1000007
MEDIUM · 5.9

CVE-2017-1000007

txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

Vulnerability Description

txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TwistedmatrixTxaws-

Related Weaknesses (CWE)

CWE-295CWE-200

References

FAQ

What is CVE-2017-1000007?

CVE-2017-1000007 is a vulnerability with a CVSS score of 5.9 (MEDIUM). txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

How severe is CVE-2017-1000007?

CVE-2017-1000007 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-1000007?

Check the references section above for vendor advisories and patch information. Affected products include: Twistedmatrix Txaws.