PT-2017-10775 · Seapine · Testtrack Server

Agirlnamedsophia · Publicado 2017-07-13 · Atualizado 2020-08-05 · CVE-2017-1000068

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TestTrack Server versions 1.0 and earlier

Description The issue is related to an authentication flaw in the split disablement feature, which can be exploited to disable arbitrary running splits. This can cause a denial of service to clients.

Recommendations For TestTrack Server versions 1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-1000068

Produtos afetados

Testtrack Server

Referências · 3

• https://github.com/Betterment/test_track/releases/tag/v1.0.1 · Nota
• https://osv.dev/vulnerability/CVE-2017-1000068 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000068 · Nota de Segurança