Professional 1.4.12
Summary: PortSwigger released Burp Suite Professional 1.4.12 on 7 August 2012, resolving a problem with proxying SSL connections from Android clients. When an Android client sent a CONNECT request containing an IP address, Burp previously generated a certificate with that IP as its subject name, causing hostname mismatch errors; Burp now connects to the destination server to obtain its actual certificate and generates one with the same subject name and alternative subject names.
Why it matters: The fix still requires installing Burp's CA certificate in the Android client, so anyone intercepting Android traffic for testing depends on that certificate being trusted on the device. The release also adds an option to the active scan wizard to remove items with no parameters, which the note warns should not be used automatically because those items are fast to scan and may still contain bugs found only by the active scanner.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026