Nexpose Release Notes / Jan 13, 2021

Jan 13, 20216.6.59

New

  • Microsoft Patch Tuesday coverage: This release includes updated scan coverage for January 2021.

Improved

  • More control over database compression maintenance: You can now manually initiate database compression (which executes the PostgreSQL VACUUM command) by running the Compress database tables maintenance task in the Security Console. While this process already happens automatically with daily product use, this manual option allows you to perform database compression on your own when necessary and ensures that the automated instance of this task runs more efficiently.
  • Enhanced DNS fingerprinting for the Scan Engine: We expanded the number of DNS services the Scan Engine is able to identify by adding support for the dns.versionbind database in the Recog framework.

Fixed

  • Saving the Data Warehouse Configuration page in the Security Console will now correctly redirect the user back to the Administration page.
  • The Assign Scan Engine and Schedule Automatic Scans user permissions in the Security Console will now grant their respective site configuration privileges as described.
  • The Scan Engine will now collect port information from netstat during an Authenticated Discovery Scan.
  • We fixed a fingerprinting issue on Cisco IOS and IOS XE systems where shell access has been disabled.
  • We fixed an issue that caused the authentication method that is logged during SAP HANA fingerprinting to appear truncated.
  • We fixed an issue where the documented asset_id column was missing from the dim_asset_socket_details dimension in the Reporting Data Model.
  • We fixed an issue where the Constraint Validation Service scheduler could display incorrect dates and mismatched frequency ordinals.
  • We fixed an issue that could lead to lower quality OS fingerprinting on Windows systems running IIS version 10.
  • We fixed an issue that prevented our audit log messages from being properly rolled over in the logs directory.