MEDIUM
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.
Source: MITRE
Published: 2018-06-18
Updated: 2018-08-14
Type: CWE-295
Base Score: 5.8
Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N)
Impact Score: 4.9
Exploitability Score: 8.6
Severity: MEDIUM
Base Score: 7.4
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Impact Score: 5.2
Exploitability Score: 2.2
Severity: HIGH