CVE-2021-44230

PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows has weak file permissions for the embedded H2 database, which might lead to privilege escalation. This issue can be exploited by an adversary who has already compromised a valid Windows account on the server via separate means. I...

CVE-2021-44230

PortSwigger Burp Suite Enterprise Edition for Windows prior to 2021.11 exposes weak file permissions on the embedded H2 database, enabling possible privilege escalation for an attacker that already has a valid Windows account on the server and may access sensitive configuration, database, and log...

PortSwigger Burp Suite 访问控制错误漏洞

PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. An Access Control Error vulnerability exists in PortSwigger Burp Suite Enterprise Edition that stems from the product not setting the correct file permissions on the embedded H2 database. An attack...