What is the vulnerability ID?

The vulnerability ID is CVE-2021-44230.

What is the severity of CVE-2021-44230?

The severity of CVE-2021-44230 is medium with a severity value of 6.5.

What is the affected software?

The affected software is PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows.

How can I fix CVE-2021-44230?

To fix CVE-2021-44230, update to PortSwigger Burp Suite Enterprise Edition 2021.11 or later.

Vulnerability/
CVE-2021-44230

medium

6.5

CWE

732

30/11/2021

21/11/2024

CVE-2021-44230

Q: How can this vulnerability be exploited?

This vulnerability can be exploited by an adversary who has already compromised a valid Windows account on the server via separate means.

First published: Tue Nov 30 2021(Updated: )

PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows has weak file permissions for the embedded H2 database, which might lead to privilege escalation. This issue can be exploited by an adversary who has already compromised a valid Windows account on the server via separate means. In this scenario, the compromised account may have inherited read access to sensitive configuration, database, and log files.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
All of
Burp Suite	<=2021.11
Microsoft Windows Operating System
Burp Suite	<=2021.11
Microsoft Windows Operating System

Never miss a vulnerability like this again

Reference Links

https://portswigger.net/burp/releases/enterprise-edition-2021-11?requestededition=enterprise

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2021-44230.
What is the severity of CVE-2021-44230?
The severity of CVE-2021-44230 is medium with a severity value of 6.5.
What is the affected software?
The affected software is PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows.
How can this vulnerability be exploited?
This vulnerability can be exploited by an adversary who has already compromised a valid Windows account on the server via separate means.
How can I fix CVE-2021-44230?
To fix CVE-2021-44230, update to PortSwigger Burp Suite Enterprise Edition 2021.11 or later.

agent/type
collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/severity
agent/description
agent/first-publish-date
agent/last-modified-date
agent/author
agent/event
agent/source
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
collector/nvd-index
vendor/portswigger
canonical/burp suite
version/burp suite/2021.11
vendor/microsoft
canonical/microsoft windows operating system

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.