CVE-2017-1000068
Last modified
CVE-2017-1000068 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field.. EPSS estimates a 1.81% chance of exploitation in the next 30 days.
Description
TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resulting in the ability to disable arbitrary running splits and cause denial of service to clients in the field.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Betterment | Testtrack | <= 1.0 |
References
- https://github.com/Betterment/test_track/releases/tag/v1.0.1Third Party Advisory
- https://github.com/Betterment/test_track/releases/tag/v1.0.1Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-1000068?
How severe is CVE-2017-1000068?
How do I fix CVE-2017-1000068?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-1000062kittoframework kitto 0.5.1 is vulnerable to directory traver…
- CVE-2017-1000063kittoframework kitto version 0.5.1 is vulnerable to an XSS i…
- CVE-2017-1000064kittoframework kitto version 0.5.1 is vulnerable to memory e…
- CVE-2017-1000065Multiple Cross-site scripting (XSS) vulnerabilities in rpc.p…
- CVE-2017-1000066The entry details view function in KeePass version 1.32 inad…
- CVE-2017-1000067MODX Revolution version 2.x - 2.5.6 is vulnerable to blind S…
- CVE-2017-1000069CSRF in Bitly oauth2_proxy 2.1 during authentication flow
- CVE-2017-1000070The Bitly oauth2_proxy in version 2.1 and earlier was affect…
- CVE-2017-1000071Jasig phpCAS version 1.3.4 is vulnerable to an authenticatio…
- CVE-2017-1000072Creolabs Gravity version 1.0 is vulnerable to a Double Free …
- CVE-2017-1000073Creolabs Gravity version 1.0 is vulnerable to a heap overflo…
- CVE-2017-1000074Creolabs Gravity version 1.0 is vulnerable to a stack overfl…
Are you affected by CVE-2017-1000068?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST