Oracle Access Manager 詳細不明な脆弱性（credentialed check、2014 年 4 月 CPU）

medium Nessus プラグイン ID 77421

Language:

バージョン 1.596 Jul 28, 2025, 4:47 PM Logic Changes (RSA SSH certificates can use SHA2 signatures when needed) Plugin Feed: 202507281647
バージョン 1.595 Jul 22, 2025, 3:24 AM Detection (Turn off failover to NTLM if 'only_use_kerberos' is set.) Plugin Feed: 202507220324
バージョン 1.594 Jul 16, 2025, 9:38 AM Detection (improved regex for ohome discovery) Plugin Feed: 202507160938
バージョン 1.593 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
バージョン 1.592 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
バージョン 1.591 Jul 2, 2025, 3:00 AM Detection (added parsing for version from patch description) Plugin Feed: 202507020300
バージョン 1.590 Jul 1, 2025, 1:15 AM Detection (added parsing for version from patch description) Plugin Feed: 202507010115
バージョン 1.589 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
バージョン 1.588 Jun 23, 2025, 9:47 PM Logic Changes Plugin Feed: 202506232147
バージョン 1.587 Jun 16, 2025, 4:11 PM Detection (added parsing for version from patch description) Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
バージョン 1.584 May 28, 2025, 6:51 PM Detection (Experimental Mode for Apache Log4j detection. added function to parse oracle patch descriptions. enhanced comps.xml handling with file inclusion) Plugin Feed: 202505281851
バージョン 1.582 May 28, 2025, 9:47 AM Logic Changes (Streamline SSH compatibility code) Plugin Feed: 202505280947
バージョン 1.581 May 7, 2025, 3:51 PM Logic Changes Plugin Feed: 202505071551
バージョン 1.580 Apr 30, 2025, 5:21 PM Logic Changes (Exclude container storage directories from find searches.) Plugin Feed: 202504301721
バージョン 1.579 Apr 28, 2025, 4:40 PM Logic Changes (Handling absence of SSH privilege escalation uniformly across products) New Plugin Feed: 202504281640
バージョン 1.577 Apr 1, 2025, 12:23 AM Logic Changes (Handle Cisco devices that echo command and prompt before command results.) Plugin Feed: 202504010023
バージョン 1.576 Mar 31, 2025, 5:13 PM Detection (Improvements to OS detection results. adding remote detection support for SEoL plugins) Plugin Feed: 202503311713
バージョン 1.574 Mar 20, 2025, 7:47 AM Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.) Plugin Feed: 202503200747
バージョン 1.571 Mar 6, 2025, 7:23 AM Detection (Handle long MOTD with pagination on Nokia devices.) Plugin Feed: 202503060723
バージョン 1.570 Mar 3, 2025, 9:41 PM New Plugin Feed: 202503032141
バージョン 1.569 Mar 3, 2025, 5:54 PM Logic Changes (improve detection for some devices) Plugin Feed: 202503031754
バージョン 1.567 Feb 28, 2025, 9:08 PM New Plugin Feed: 202502282108
バージョン 1.566 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
バージョン 1.565 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
バージョン 1.564 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
バージョン 1.562 Jan 22, 2025, 5:44 PM New Plugin Feed: 202501221744
バージョン 1.561 Jan 21, 2025, 6:17 PM Detection (Add SSH local checks support for Union Tech UOS) Logic Changes (Tighten recognition of need to escalate.) Plugin Feed: 202501211817
バージョン 1.557 Jan 15, 2025, 1:31 AM Logic Changes (Structured vuln reporting for MS Rollups) Plugin Feed: 202501150131
バージョン 1.556 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
バージョン 1.555 Jan 13, 2025, 7:38 PM Logic Changes (Add display fix to structured reporting.) Plugin Feed: 202501131938
バージョン 1.551 Dec 30, 2024, 4:30 PM Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.) Plugin Feed: 202412301630
バージョン 1.550 Dec 24, 2024, 11:44 AM New Plugin Feed: 202412241144
バージョン 1.549 Dec 18, 2024, 9:32 PM Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts) Plugin Feed: 202412182132
バージョン 1.548 Dec 18, 2024, 7:05 AM Detection (Fixed SSH authentication using the "none" method) Plugin Feed: 202412180705
バージョン 1.547 Dec 16, 2024, 8:47 PM Logic Changes (Handle Alibaba Linux rpm lists the same as other RPM based distros) Plugin Feed: 202412162047
バージョン 1.546 Dec 6, 2024, 8:13 PM Detection (Better debugging related to local checks evaluations) Plugin Feed: 202412062013
バージョン 1.544 Dec 3, 2024, 3:59 PM Detection (Support Azure Linux for generated package plugins.) Plugin Feed: 202412031559
バージョン 1.543 Nov 22, 2024, 6:54 PM Logic Changes (Fixed installation reporting) Plugin Feed: 202411221854
バージョン 1.542 Nov 20, 2024, 5:30 PM Detection (Reports vulnerable dpkg based packages as structured data.) Plugin Feed: 202411201730
バージョン 1.541 Nov 18, 2024, 8:22 PM Detection (Reports vulnerable rpm based packages as structured data.) Plugin Feed: 202411182022
バージョン 1.539 Nov 12, 2024, 8:29 PM Logic Changes (Adding installs report) Plugin Feed: 202411122029
バージョン 1.537 Nov 7, 2024, 8:25 PM Logic Changes Plugin Feed: 202411072025
バージョン 1.536 Nov 6, 2024, 2:41 PM Detection (adding support for Forescout CounterACT) Plugin Feed: 202411061441
バージョン 1.535 Nov 4, 2024, 6:02 PM Plugin requirements Plugin Feed: 202411041802
バージョン 1.534 Oct 30, 2024, 4:21 PM Detection (Process file exclusion wildcards in a consistent way across find, locate, etc.) Plugin Feed: 202410301621
バージョン 1.533 Oct 29, 2024, 8:44 PM Logic Changes (Extend structured reporting to vcf_extras) Plugin Feed: 202410292044
バージョン 1.527 Oct 10, 2024, 11:57 PM New Plugin Feed: 202410102357
バージョン 1.526 Oct 10, 2024, 4:58 AM Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.) Plugin Feed: 202410100458
バージョン 1.525 Oct 9, 2024, 5:56 PM Logic Changes (Corrects vulnerability-finding structured data tags to include the port.) Plugin Feed: 202410091756
バージョン 1.521 Oct 3, 2024, 6:29 PM Detection (Adding hardware constraint support to VCF and UCF) Plugin Feed: 202410031829
バージョン 1.520 Oct 2, 2024, 4:10 PM Logic Changes (Adds structured data reports to a subset of manual plugins.) Plugin Feed: 202410021610
バージョン 1.519 Sep 26, 2024, 4:34 PM Detection (adding package association overrides) Plugin Feed: 202409261634
バージョン 1.518 Sep 25, 2024, 3:12 PM Detection (Adding support for user-supplied timeout value for the find command.) Plugin Feed: 202409251512
バージョン 1.516 Sep 23, 2024, 4:07 PM Logic Changes (Consolidate all calls to "rpm -qa") Plugin Feed: 202409231607
バージョン 1.514 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
バージョン 1.513 Sep 10, 2024, 4:59 PM New Plugin Feed: 202409101659
バージョン 1.511 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
バージョン 1.508 Sep 3, 2024, 5:26 PM Detection (Support for Aruba CPPM SSH based local checks) Plugin Feed: 202409031726
バージョン 1.506 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
バージョン 1.505 Aug 14, 2024, 2:40 AM New Plugin requirements (Trusted) Plugin Feed: 202408140240
バージョン 1.503 Aug 8, 2024, 4:43 PM Logic Changes (Support OpenSSH private key formats for authentication.) Plugin Feed: 202408081643
バージョン 1.502 Aug 6, 2024, 4:43 PM Detection (Fix to allow Nessus Agent audits to query security settings registry key default values.) Plugin Feed: 202408061643
バージョン 1.498 Jul 24, 2024, 6:31 PM Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family) Plugin Feed: 202407241831
バージョン 1.497 Jul 23, 2024, 9:24 PM New Plugin Feed: 202407232124
バージョン 1.494 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
バージョン 1.493 Jul 16, 2024, 4:34 PM Logic Changes (Revised plugin logging) Plugin Feed: 202407161634
バージョン 1.492 Jul 6, 2024, 12:22 AM Detection (Changes to support Juniper Session Smart Router) Plugin Feed: 202407060022
バージョン 1.491 Jul 5, 2024, 9:04 PM Detection (Adding detection of Juniper SSR devices) Plugin Feed: 202407052104
バージョン 1.490 Jun 27, 2024, 9:09 PM New (Deploy nessus_utils binaries on the Nessus Agent) Plugin Feed: 202406272109
バージョン 1.487 Jun 21, 2024, 9:43 PM New Plugin Feed: 202406212143
バージョン 1.486 Jun 21, 2024, 6:31 PM Detection (updated detection for SonicOS devices) Plugin Feed: 202406211831
バージョン 1.485 Jun 21, 2024, 2:16 PM Logic Changes Plugin Feed: 202406211416
バージョン 1.483 Jun 12, 2024, 4:30 PM Logic Changes (Prefer replace_kb_item in debug KBs to prevent unintentional duplication/forking) Plugin Feed: 202406121630
バージョン 1.481 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
バージョン 1.480 May 9, 2024, 6:10 PM New Plugin Feed: 202405091810
バージョン 1.479 May 7, 2024, 10:55 AM Logic Changes (Streamling reporting for unpatched rpm based vuln checks.) Plugin Feed: 202405071055
バージョン 1.474 Apr 16, 2024, 4:33 PM Logic Changes (Structured reporting for unpatched rpm based vuln checks.) Plugin Feed: 202404161633
バージョン 1.470 Mar 30, 2024, 4:20 PM New Plugin Feed: 202403301620
バージョン 1.469 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
バージョン 1.469 Mar 30, 2024, 1:01 AM New Plugin Feed: 202403300101
バージョン 1.466 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
バージョン 1.460 Mar 5, 2024, 2:40 PM Detection (improved file verification for Windows Agents) Plugin Feed: 202403051440
バージョン 1.459 Mar 5, 2024, 1:15 AM Logic Changes (Report structured data for Microsoft Exchange checks.. Report structured data for RPM version checks.) Plugin Feed: 202403050115
バージョン 1.457 Mar 4, 2024, 5:08 PM Logic Changes (Add support functions for unpatched debian/ubuntu vuln checks.) Plugin Feed: 202403041708
バージョン 1.456 Feb 27, 2024, 8:49 PM Logic Changes (Report structured data for DPKG version checks.) Plugin Feed: 202402272049
バージョン 1.450 Feb 9, 2024, 11:22 AM New Plugin Feed: 202402091122
バージョン 1.449 Jan 20, 2024, 7:10 PM Logic Changes (Updated parse_rpm_name() to handle package names that have no release information.) Plugin Feed: 202401201910
バージョン 1.448 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
バージョン 1.446 Jan 16, 2024, 5:39 PM Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
バージョン 1.444 Jan 15, 2024, 9:56 AM Detection (improved regex) Plugin Feed: 202401150956
バージョン 1.443 Jan 8, 2024, 6:41 PM Detection (retooled detection to better handle managed installs) Plugin Feed: 202401081841
バージョン 1.438 Dec 11, 2023, 6:11 PM Detection (Fix error handling for find_cmd. Remove bash error from the output of commands that timed out) Plugin Feed: 202312111811
バージョン 1.437 Dec 6, 2023, 12:08 AM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312060008
バージョン 1.436 Dec 5, 2023, 9:49 PM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312052149
バージョン 1.434 Nov 28, 2023, 11:17 AM Detection (Fixing detection of Cisco Firepower devices) Plugin Feed: 202311281117
バージョン 1.433 Nov 27, 2023, 6:11 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271811
バージョン 1.432 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
バージョン 1.432 Nov 27, 2023, 4:16 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271616
バージョン 1.426 Oct 30, 2023, 1:08 PM Detection (Fixed detection of JUNOS) Plugin Feed: 202310301308
バージョン 1.425 Oct 25, 2023, 5:17 PM Detection (Handle SSH exec hang and pagination ctrl codes for PanOS) Plugin Feed: 202310251717
バージョン 1.423 Oct 18, 2023, 7:26 PM New Plugin Feed: 202310181926
バージョン 1.416 Oct 9, 2023, 8:58 PM New Plugin Feed: 202310092058
バージョン 1.414 Oct 4, 2023, 11:07 PM Detection (Fixed Cisco Firepower detection) Plugin Feed: 202310042307
バージョン 1.413 Oct 3, 2023, 9:02 PM Detection (Added Alma Linux to package association checks) Plugin Feed: 202310032102
バージョン 1.412 Oct 3, 2023, 6:16 PM New Plugin Feed: 202310031816
バージョン 1.411 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
バージョン 1.409 Aug 9, 2023, 11:01 PM Logic Changes Plugin Feed: 202308092301
バージョン 1.404 Jul 24, 2023, 7:10 PM Logic Changes (added debugging) Plugin Feed: 202307241910
バージョン 1.402 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list) Plugin Feed: 202307171715
バージョン 1.400 Jul 10, 2023, 7:11 PM Logic Changes (Restrict ClientHello ciphersuites by encapsulation) Plugin Feed: 202307101911
バージョン 1.399 Jul 5, 2023, 9:03 PM Logic Changes (added ingestion and ability of target priority lists for SSH credentials) Plugin Feed: 202307052103
バージョン 1.397 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
バージョン 1.392 Jun 9, 2023, 12:10 AM Logic Changes (Fix two function returns) Plugin Feed: 202306090010
バージョン 1.390 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
バージョン 1.388 May 18, 2023, 1:08 AM Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.) Plugin Feed: 202305180108
バージョン 1.386 May 16, 2023, 7:02 PM Detection (Authenticate WMI/DCOM using Kerberos credentials.) Plugin Feed: 202305161902
バージョン 1.383 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
バージョン 1.380 Apr 6, 2023, 6:58 PM Detection (Add Kerberos debug logging) Plugin Feed: 202304061858
バージョン 1.377 Mar 8, 2023, 1:05 AM Logic Changes Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022