Cyber Risks · PortSwigger Research

Enterprise Edition 2022.5

Summary: PortSwigger released Burp Suite Enterprise Edition 2022.5 on 6 June 2022, adding the ability to raise tickets for multiple issues at once in Jira, GitLab and Trello, either as separate tickets per issue or combined by issue type. The release also moves scan configuration management exclusively to the site level, so a site's configuration can no longer be overridden when scheduling a scan, and fixes a site-restriction bug found in internal testing where a low-privileged user gained access to all configured sites after a high-privileged user restricted their access and then deleted those sites.

What you should know: The access-control bug meant a low-privileged user could reach every configured site once the restricted sites were deleted, and it was caught only in internal testing. The site-level configuration change is aimed at stopping one-off scans from distorting the trend analysis data used to track security posture.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related