PT-2017-10775 · Seapine · Testtrack Server

Agirlnamedsophia · Published 2017-07-13 · Updated 2020-08-05 · CVE-2017-1000068

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TestTrack Server versions 1.0 and earlier

Description The issue is related to an authentication flaw in the split disablement feature, which can be exploited to disable arbitrary running splits. This can cause a denial of service to clients.

Recommendations For TestTrack Server versions 1.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-1000068

Affected Products

Testtrack Server

References · 3

• https://osv.dev/vulnerability/CVE-2017-1000068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000068 · Security Note
• https://github.com/Betterment/test_track/releases/tag/v1.0.1 · Note