What is CVE-2017-18284?

CVE-2017-18284 is a high-severity vulnerability in Burp_project Burp, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.1/10. Published 2018-06-04.

How severe is CVE-2017-18284?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Burp_project Burp

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification bef…

EPSS: 0.003 (19.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Burp_project Burp
Gentoo Linux
N/a — versions n/a

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2017-18284?: CVE-2017-18284 is a high-severity vulnerability in Burp_project Burp, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.1/10. Published 2018-06-04.
How severe is CVE-2017-18284?: High severity. CVSS v3 base score is 7.1 out of 10.