CVE-2017-1000007

5.9 mediumEPSS 0.8%

Medium (5.9) in twistedmatrix txaws. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in txaws 0.4.0.

txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

Severity

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-295
Published: 2017-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-cggm-52qp-wvw7	PyPI	txaws	<0.4.0	0.4.0
PYSEC-2017-85	PyPI	txaws	>=0.0.1	no fix published