Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Burp_suite | Portswigger | 1.7.32 (including) | 1.7.32 (including) |
| Burp_suite | Portswigger | 1.7.33 (including) | 1.7.33 (including) |