6.5

CVE-2021-29416

Exploit
An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Portswigger ≫ Burp Suite SwEditioncommunity Version < 2021.2
Portswigger ≫ Burp Suite SwEditionprofessional Version < 2021.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.15% 0.627
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://hackerone.com/reports/1054382
Third Party Advisory
Exploit
Issue Tracking
https://portswigger.net/burp/releases/professional-community-2020-12?requestededition=professional
Vendor Advisory
Release Notes