CVE-2017-1000068

Published: Jul 17, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field.

Affected (1)

Products: Betterment: Testtrack

Betterment

1 product

Testtrack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Betterment Testtrack	Up to 1.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://github.com/Betterment/test_track/releases/tag/v1.0.1

Source: cve@mitre.org

Third Party Advisory

https://github.com/Betterment/test_track/releases/tag/v1.0.1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.