BMC Server Automation RSCD Agent Weak ACL NSH 任意のコマンドの実行

critical Nessus プラグイン ID 91947

Language:

バージョン 1.172 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
バージョン 1.171 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
バージョン 1.170 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
バージョン 1.169 Jun 16, 2025, 4:11 PM Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
バージョン 1.168 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
バージョン 1.167 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
バージョン 1.166 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
バージョン 1.165 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
バージョン 1.163 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
バージョン 1.162 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
バージョン 1.161 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
バージョン 1.160 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
バージョン 1.159 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
バージョン 1.158 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
バージョン 1.154 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
バージョン 1.153 Jan 16, 2024, 5:39 PM Detection (Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
バージョン 1.152 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
バージョン 1.150 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
バージョン 1.147 Jul 24, 2023, 7:10 PM Logic Changes (added debugging) Plugin Feed: 202307241910
バージョン 1.146 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii()) Plugin Feed: 202307171715
バージョン 1.145 Jul 10, 2023, 7:11 PM Logic Changes (Restrict ClientHello ciphersuites by encapsulation) Plugin Feed: 202307101911
バージョン 1.144 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
バージョン 1.142 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
バージョン 1.140 May 16, 2023, 7:02 PM Detection (Authenticate WMI/DCOM using Kerberos credentials.) Plugin Feed: 202305161902
バージョン 1.138 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
バージョン 1.135 Apr 6, 2023, 6:58 PM Detection (Add Kerberos debug logging) Plugin Feed: 202304061858
バージョン 1.133 Mar 8, 2023, 1:05 AM Logic Changes Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022