Attack Surface Management Discovery Engine release v1.31.0
This Attack Surface Management Discovery Engine release includes:
- Improved remediation for IIS Shortnames Misconfiguration
- Added nodejs remediation for Insecure Cookie (Missing 'HttpOnly' Attribute) Issue
Vulnerability Checks
- Added CVE-2023-40044 vulnerability check (Progress WS_FTP Server remote code execution)
- Added CVE-2023-33246 vulnerability check (Apache RocketMQ remote code ececution)
- Added CVE-2023-22515 vulnerability check (Atlassian Confluence broken access control)
Technology Fingerprints
- Improved Progress technology fingerprints
- Improved Atlassian Confluence technology fingerprints