Cyber Risks · PortSwigger Research

Enterprise Edition 2021.4.1

Summary: PortSwigger released Burp Suite Enterprise Edition 2021.4.1 on 29 April 2021, adding agent machine pools that assign each agent machine and each site to exactly one pool, so an agent only scans sites in its own pool. The release also redesigns the scan results page, improves navigation, adds a user permission for viewing site login details that is unassigned by default, fixes several bugs, and drops AWS CloudFormation and Azure Resource Manager templates.

Key Takeaway: The new login-details permission is not granted to any user by default, so access to stored credentials and recorded login sequences depends on an administrator deliberately assigning it. PortSwigger also stopped shipping CloudFormation and Azure Resource Manager templates and recommends waiting for its simpler deployment method, which leaves existing template-based deployments to be revisited.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related