検出

IBM Data Risk Manager の安全でないデフォルトのパスワード (CVE-2020-4429)

critical Nessus プラグイン ID 181927

Language:

バージョン 1.91

Oct 27, 2025, 3:15 PM

  • Logic Changes (Gate HTTP debugging behind hidden preference)

Plugin Feed: 202510271515

バージョン 1.90

Oct 23, 2025, 3:11 AM

  • Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections)

Plugin Feed: 202510230311

バージョン 1.88

Oct 21, 2025, 3:09 AM

  • Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.)

Plugin Feed: 202510210309

バージョン 1.87

Oct 16, 2025, 4:39 PM

  • Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.)

Plugin Feed: 202510161639

バージョン 1.85

Oct 1, 2025, 9:12 PM

  • Logic Changes (Adding support for user-supplied header added to all HTTP requests.)

Plugin Feed: 202510012112

バージョン 1.84

Sep 30, 2025, 12:41 AM

  • Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.)

Plugin Feed: 202509300041

バージョン 1.82

Aug 26, 2025, 7:20 AM

  • Logic Changes

Plugin Feed: 202508260720

バージョン 1.81

Jul 28, 2025, 4:47 PM

  • Logic Changes (RSA SSH certificates can use SHA2 signatures when needed)

Plugin Feed: 202507281647

バージョン 1.80

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

バージョン 1.79

Jul 10, 2025, 5:41 PM

  • Logic Changes (Windows CA support)

Plugin Feed: 202507101741

バージョン 1.78

Jun 27, 2025, 8:01 PM

  • Logic Changes

Plugin Feed: 202506272001

バージョン 1.77

Jun 16, 2025, 4:11 PM

  • Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.)

Plugin Feed: 202506161611

バージョン 1.76

May 28, 2025, 9:47 AM

  • Logic Changes (Streamline SSH compatibility code)

Plugin Feed: 202505280947

バージョン 1.75

Apr 28, 2025, 4:40 PM

  • Logic Changes (Handling absence of SSH privilege escalation uniformly across products)

Plugin Feed: 202504281640

バージョン 1.74

Apr 1, 2025, 12:23 AM

  • Logic Changes (Handle Cisco devices that echo command and prompt before command results.)

Plugin Feed: 202504010023

バージョン 1.73

Mar 20, 2025, 7:47 AM

  • Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.)

Plugin Feed: 202503200747

バージョン 1.72

Mar 6, 2025, 7:23 AM

  • Detection (Handle long MOTD with pagination on Nokia devices.)

Plugin Feed: 202503060723

バージョン 1.71

Mar 3, 2025, 5:54 PM

  • Logic Changes (improve detection for some devices)

Plugin Feed: 202503031754

バージョン 1.70

Feb 12, 2025, 3:29 PM

  • Logic Changes

Plugin Feed: 202502121529

バージョン 1.69

Feb 12, 2025, 1:58 AM

  • Logic Changes

Plugin Feed: 202502120158

バージョン 1.68

Feb 10, 2025, 4:00 PM

  • Logic Changes

Plugin Feed: 202502101600

バージョン 1.66

Jan 22, 2025, 5:44 PM

  • New

Plugin Feed: 202501221744

バージョン 1.65

Jan 21, 2025, 6:17 PM

  • Detection (Add SSH local checks support for Union Tech UOS)
  • Logic Changes (Tighten recognition of need to escalate.)

Plugin Feed: 202501211817

バージョン 1.61

Jan 13, 2025, 10:27 PM

  • New

Plugin Feed: 202501132227

バージョン 1.57

Dec 30, 2024, 4:30 PM

  • Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.)

Plugin Feed: 202412301630

バージョン 1.56

Dec 18, 2024, 9:32 PM

  • Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts)

Plugin Feed: 202412182132

バージョン 1.55

Dec 18, 2024, 7:05 AM

  • Detection (Fixed SSH authentication using the "none" method)

Plugin Feed: 202412180705

バージョン 1.54

Dec 6, 2024, 8:13 PM

  • Detection (Better debugging related to local checks evaluations)

Plugin Feed: 202412062013

バージョン 1.53

Dec 3, 2024, 3:59 PM

  • Detection (Support Azure Linux for generated package plugins.)

Plugin Feed: 202412031559

バージョン 1.52

Nov 22, 2024, 6:54 PM

  • Logic Changes (Fixed installation reporting)

Plugin Feed: 202411221854

バージョン 1.51

Nov 12, 2024, 8:29 PM

  • Logic Changes (Adding installs report)

Plugin Feed: 202411122029

バージョン 1.50

Nov 6, 2024, 2:41 PM

  • Detection (adding support for Forescout CounterACT)

Plugin Feed: 202411061441

バージョン 1.49

Oct 10, 2024, 11:57 PM

  • New

Plugin Feed: 202410102357

バージョン 1.48

Oct 10, 2024, 4:58 AM

  • Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.)

Plugin Feed: 202410100458

バージョン 1.46

Sep 11, 2024, 5:35 PM

  • New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more)

Plugin Feed: 202409111735

バージョン 1.45

Sep 3, 2024, 11:47 PM

  • Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins)

Plugin Feed: 202409032347

バージョン 1.43

Sep 3, 2024, 5:26 PM

  • Detection (Support for Aruba CPPM SSH based local checks)

Plugin Feed: 202409031726

バージョン 1.42

Aug 14, 2024, 8:33 PM

  • Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning)

Plugin Feed: 202408142033

バージョン 1.41

Aug 8, 2024, 4:43 PM

  • Logic Changes (Support OpenSSH private key formats for authentication.)

Plugin Feed: 202408081643

バージョン 1.38

Jul 24, 2024, 6:31 PM

  • Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family)

Plugin Feed: 202407241831

バージョン 1.36

Jul 17, 2024, 11:02 PM

  • Logic Changes

Plugin Feed: 202407172302

バージョン 1.35

Jul 6, 2024, 12:22 AM

  • Detection (Changes to support Juniper Session Smart Router)

Plugin Feed: 202407060022

バージョン 1.34

Jul 5, 2024, 9:04 PM

  • Detection (Adding detection of Juniper SSR devices)

Plugin Feed: 202407052104

バージョン 1.33

Jun 27, 2024, 9:09 PM

  • New (Deploy nessus_utils binaries on the Nessus Agent)

Plugin Feed: 202406272109

バージョン 1.31

Jun 21, 2024, 6:31 PM

  • Detection (updated detection for SonicOS devices)

Plugin Feed: 202406211831

バージョン 1.30

Jun 21, 2024, 2:16 PM

  • Logic Changes

Plugin Feed: 202406211416

バージョン 1.29

May 20, 2024, 10:13 AM

  • Logic Changes

Plugin Feed: 202405201013

バージョン 1.26

Mar 19, 2024, 6:40 PM

  • Logic Changes (Improving logging to reduce disk space usage)

Plugin Feed: 202403191840

バージョン 1.21

Feb 9, 2024, 11:22 AM

  • New

Plugin Feed: 202402091122

バージョン 1.20

Jan 16, 2024, 8:55 PM

  • Logic Changes (Improving debug logging)

Plugin Feed: 202401162055

バージョン 1.18

Jan 16, 2024, 5:39 PM

  • Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos)
  • Logic Changes (Improving debug logging)

Plugin Feed: 202401161739

バージョン 1.14

Dec 6, 2023, 12:08 AM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312060008

バージョン 1.13

Dec 5, 2023, 9:49 PM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312052149

バージョン 1.12

Nov 28, 2023, 11:17 AM

  • Detection (Fixing detection of Cisco Firepower devices)

Plugin Feed: 202311281117

バージョン 1.11

Nov 27, 2023, 6:11 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271811

バージョン 1.10

Nov 14, 2023, 4:21 PM

  • Detection (Support SHA2 based encryption for Kerberos)

Plugin Feed: 202311141621

バージョン 1.10

Nov 27, 2023, 4:16 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271616

バージョン 1.9

Oct 30, 2023, 1:08 PM

  • Detection (Fixed detection of JUNOS)

Plugin Feed: 202310301308

バージョン 1.8

Oct 25, 2023, 5:17 PM

  • Detection (Handle SSH exec hang and pagination ctrl codes for PanOS)

Plugin Feed: 202310251717

バージョン 1.2

Oct 4, 2023, 11:07 PM

  • Detection (Fixed Cisco Firepower detection)

Plugin Feed: 202310042307

バージョン 1.1

Sep 28, 2023, 4:12 PM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True". "Exploit framework metasploit" set to "True". "Exploitability ease" set to "Exploits are available")

Plugin Feed: 202309281612

バージョン 1.0

Sep 27, 2023, 8:30 PM

  • New

Plugin Feed: 202309272030

* Changelogs are generally available for changes made after Nov 1, 2022