PortSwigger Burp Suite up to 1.7.33 Server Certificate Validator certificate validation

Summaryinfo

A vulnerability identified as critical has been detected in PortSwigger Burp Suite up to 1.7.33. Affected by this vulnerability is an unknown functionality of the component Server Certificate Validator. Performing a manipulation results in certificate validation. This vulnerability is known as CVE-2018-10377. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in PortSwigger Burp Suite up to 1.7.33 (Security Testing Software). It has been classified as critical. This affects some unknown functionality of the component Server Certificate Validator. The manipulation with an unknown input leads to a certificate validation vulnerability. CWE is classifying the issue as CWE-295. The product does not validate, or incorrectly validates, a certificate. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.

The bug was discovered 06/14/2018. The weakness was published 06/15/2018 as HackerOne as confirmed advisory (Website). The advisory is shared at hackerone.com. The public release has been coordinated with PortSwigger. This vulnerability is uniquely identified as CVE-2018-10377 since 04/25/2018. The exploitability is told to be difficult. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1587.003 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 60 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 1.7.34 eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Similar entry is available at VDB-119660. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Security Testing Software

Vendor

• PortSwigger

Name

• Burp Suite

Version

• 1.7.0
• 1.7.1
• 1.7.2
• 1.7.3
• 1.7.4
• 1.7.5
• 1.7.6
• 1.7.7
• 1.7.8
• 1.7.9
• 1.7.10
• 1.7.11
• 1.7.12
• 1.7.13
• 1.7.14
• 1.7.15
• 1.7.16
• 1.7.17
• 1.7.18
• 1.7.19
• 1.7.20
• 1.7.21
• 1.7.22
• 1.7.23
• 1.7.24
• 1.7.25
• 1.7.26
• 1.7.27
• 1.7.28
• 1.7.29
• 1.7.30
• 1.7.31
• 1.7.32
• 1.7.33

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion