Enterprise Edition 2021.11
Summary: PortSwigger released Burp Suite Enterprise Edition 2021.11 on November 11, 2021, adding bulk site import from a CSV file, Slack notifications for scan start, failure, and completion, and SCIM user provisioning and decommissioning for on-premise installations. The release also fixed a local filesystem permissions issue affecting Windows deployments using the embedded H2 database, which could let an attacker who already compromised a valid Windows account read sensitive configuration, database, and log files.
Why it matters: The permissions flaw only matters after an attacker has already compromised a Windows account on the server, but in that scenario the inherited read access reaches configuration, database, and log files - and existing installations need manual hardening changes, since only brand-new installs get the fix automatically.
Read the original at PortSwigger Research ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026