PYSEC-2017-69

2017-08-0918:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

47.9%

JSON

Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.

CPENameOperatorVersion
restkiteq1.0.0
restkiteq3.2.3
restkiteq2.1.1
restkiteq2.1.2
restkiteq2.0.0
restkiteq2.2.3
restkiteq4.1.0
restkiteq2.1.6
restkiteq4.0.0
restkiteq1.3.1