SSL Certificate Validation Bypass in Amazon Redshift Python Connector

CVE-2025-5279

What is CVE-2025-5279?

The Amazon Redshift Python Connector is susceptible to an SSL certificate validation bypass when integrated with the BrowserAzureOAuth2CredentialsProvider plugin. In this configuration, the connector fails to validate the SSL certificate of the Identity Provider. This flaw can expose the token exchange process to interception, potentially allowing unauthorized access to sensitive information. To mitigate this vulnerability, users are advised to upgrade to driver version 2.1.7 and ensure that any custom or derivative code has been updated to include the necessary security patches.

References