TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field.
References
Link | Resource |
---|---|
https://github.com/Betterment/test_track/releases/tag/v1.0.1 | Third Party Advisory |
Configurations
Information
Published : 2017-07-17 06:18
Updated : 2020-08-05 10:16
NVD link : CVE-2017-1000068
Mitre link : CVE-2017-1000068
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
betterment
- testtrack