Ptarmigan before 0.2.3 lacks API token validation, e.g., an if (token === apiToken) {return true;} return false; code block.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ptarmigan | Ptarmigan_project | * | 0.2.3 (excluding) |