Description (CNA)
PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://releases.portswigger.net/2018/06/1734.html
- https://hackerone.com/reports/337680
- https://integritylabs.io/advisories/cve-2018-10377
ADP enrichment
No English description supplied.