Description (CNA)
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tenable / Burp Suite Community Edition | affected 1.7.32 and 1.7.33 |
CWE
No CWE identifiers supplied.
References
- http://releases.portswigger.net/2018/06/1734.html
- https://www.tenable.com/security/research/tra-2018-18
ADP enrichment
No English description supplied.