Lucene search

MitreCVE-2017-1000068

HistoryJul 17, 2017 - 1:18 p.m.

CVE-2017-1000068

2017-07-1713:18:18

CWE-287

mitre

web.nvd.nist.gov

nvd

cve-2017-1000068

testtrack server

authentication flaw

split disablement

denial of service

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.1%

JSON

TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field.

Affected configurations

Nvd

Node

bettermenttesttrackRange≤1.0

VendorProductVersionCPE
bettermenttesttrack*cpe:2.3:a:betterment:testtrack:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
betterment	testtrack	*	cpe:2.3:a:betterment:testtrack::::::::

References

github.com/Betterment/test_track/releases/tag/v1.0.1

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.1%

JSON

Related for CVE-2017-1000068