Cyber Risks · PortSwigger Research

Enterprise Edition: configuring your team

Summary: Burp Suite Enterprise Edition supports simultaneous access by multiple users and lets administrators configure role-based access control using predefined or custom roles and groups. Users can be created without licensing restrictions on their number and placed into groups, and groups can be restricted to certain sites to enforce horizontal segregation of privileges alongside the vertical segregation offered by roles.

Key Takeaway: The product documentation states there are no licensing restrictions on the number of users, so the access boundary is set entirely by how roles, groups, and site restrictions are configured - and a group tied to the wrong sites widens who can reach what.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related