CVE-2017-18285

HIGH 7.1CVE-2017-18285 · Published 04/06/2018 · updated 17/06/2026

In short

CVE-2017-18285 is a HIGH (CVSS 7.1) vulnerability affecting burp (burp project).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 23.9% of all vulnerabilities.
Fix: update to 2.1.32 or later.

Package	Affected versions	Patched versions
burp burp_project	`< 2.1.32`	`2.1.32`

Description

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

References

bugs.gentoo.org/641842 · Issue Tracking
security.gentoo.org/glsa/201806-03 · Vendor Advisory
security.gentoo.org/glsa/201904-05

More vulnerabilities in burp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free