CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.3 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://hackerone.com/reports/1054382	Exploit Issue Tracking Third Party Advisory
https://portswigger.net/burp/releases/professional-community-2020-12?requestededition=professional	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:portswigger:burp_suite:::::community:::*
	cpe:2.3:a:portswigger:burp_suite:::::professional:::*

History

12 Jul 2022, 17:42

Type	Values Removed	Values Added
CWE	~~CWE-74~~	NVD-CWE-Other

Information

Published : 2021-03-29 18:15

Updated : 2024-02-04 21:47

NVD link : CVE-2021-29416

Mitre link : CVE-2021-29416

CVE.ORG link : CVE-2021-29416

JSON object : View

Products Affected

portswigger

burp_suite

CWE

NVD-CWE-Other

{"id": "CVE-2021-29416", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2021-03-29T18:15:13.407", "references": [{"url": "https://hackerone.com/reports/1054382", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://portswigger.net/burp/releases/professional-community-2020-12?requestededition=professional", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB."}, {"lang": "es", "value": "Se detect\u00f3 un problema en PortSwigger Burp Suite versiones anteriores a 2021.2. Durante la visualizaci\u00f3n de una petici\u00f3n maliciosa, puede ser manipulado para emitir una petici\u00f3n que no respeta su configuraci\u00f3n de proxy ascendente. Esto podr\u00eda filtrar hashes NetNTLM en sistemas Windows que no bloquean un SMB saliente"}], "lastModified": "2022-07-12T17:42:04.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:portswigger:burp_suite:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "42A66DAC-1D7D-4BFE-960E-A160B7AD3DAB", "versionEndExcluding": "2021.2"}, {"criteria": "cpe:2.3:a:portswigger:burp_suite:*:*:*:*:professional:*:*:*", "vulnerable": true, "matchCriteriaId": "E8CA0D23-B6F2-4514-81CC-863480BD619E", "versionEndExcluding": "2021.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}