CVE-2018-10377: Medium severity burp suite vulnerability
Published Jun 17, 2018
·Updated
PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers to obtain interaction data.
Affected Software
1 affected component
PortSwigger Burp Suite<1.7.34
Event History
Jun 17, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10377?
The severity of CVE-2018-10377 is classified as medium, due to the potential for man-in-the-middle attacks.
2
How do I fix CVE-2018-10377?
To fix CVE-2018-10377, upgrade to PortSwigger Burp Suite version 1.7.34 or later.
3
What are the implications of CVE-2018-10377?
CVE-2018-10377 could allow attackers to intercept and obtain sensitive interaction data from users.
4
Which versions of PortSwigger Burp Suite are affected by CVE-2018-10377?
All versions of PortSwigger Burp Suite prior to 1.7.34 are affected by CVE-2018-10377.
5
Can CVE-2018-10377 lead to data theft?
Yes, CVE-2018-10377 can potentially lead to data theft by exposing interaction data to attackers.