Acunetix Standard & Premium

New Features

• Implemented support for OpenSearch
• Acunetix will try to discover hidden parameters and test them
• Acunetix can now check base64 encoded JSON inputs for vulnerabilities

New Vulnerability Checks

• New test for Oracle Business Intelligence Convert XXE (CVE-2019-2767)
• New test for Oracle Business Intelligence Adfresource Path traversal (CVE-2019-2588)
• New test for Oracle Business Intelligence AuthBypass (CVE-2019-2768)
• New test for Oracle Business Intelligence ReportTemplateService XXE (CVE-2019-2616)
• New test for Jira RCE (CVE-2019-11581)
• New test for Test for Atlassian Crowd RCE (CVE-2019-11580)
• New tests for Python Code Injection
• New test for Apache Spark RCE [https://spark.apache.org/security.html] (CVE-2018-11770)
• New test for ColdFusion Deserialization RCE (CVE-2019-7091)
• Implemented support for OpenID Connect Discovery
• Detect and report Apple application association files
• Added new checks for WordPress plugins, Drupal core and Joomla core

Updates

• Updated UI to accept IPv6 addresses
• Multiple improvements to DeepScan
• Improved the Directory Traversal check
• Updated the scan limits, reducing repeated requests to larger sites
• Acunetix will now extract and process gzipped files
• Multiple updates to parsing and heuristic crawler features
• Improved the vulnerability deduplication – similar vulnerabilities will be reported once
• Improved reporting of the cause of scan failures (e.g. website is unresponsive, invalid import file etc)
• Credentials provided to Auto-Login or LSR will not be used for vulnerability tests
• Improved processing of Selenium scripts
• Improved login form detection by Auto-Login feature
• Improved WebLogic detection, and testing for default WebLogic credentials
• Improved detection of Vulnerable JavaScript libraries check

Fixes

• Fixed a number of issues causing the scanner to stop unexpectedly
• Fixed issue causing AcuMonitor checks to be done when AcuMonitor is not enabled
• Fixed issue with WSDL parsing
• Fixed: Reflected tests (e.g. reflected XSS) was not done on JSON inputs
• Fixed issue causing 100% CPU usage when processing certain pages
• Fixed hang in the Acunetix Administrative Password utility on Windows
• Fixed: DeepScan was not processing XHTML pages
• Fixed issue causing Chromiumn process to remain active after PDF report generation
• Fixed issue caused by background requests when recording a login sequence
• Fixed issue when recording a login sequence on a site that uses cross-domain iframes
• Fixed issue when parsing WADL
• Fixed issue causing Host Header Attack false negatives

New Features

• Network Scanning via OpenVAS integration
• Introduced support for IPv6 domains (IPv6 addresses not supported yet)
• Dynamic resource allocation for when multiple scanners are started on the same machine
• Improved resource usage for string comparison functions
• Selenium scripts can now be used as import files

New Vulnerability Checks

• NEW check for Memcached Unauthorized Access Vulnerability
• NEW check for Redis Unauthorized Access Vulnerability
• NEW check for SAP ICF /sap/public/info sensitive information disclosure
• NEW check for SAP NetWeaver server info information disclosure
• NEW check for SAP NetWeaver ConfigServlet remote command execution
• NEW check for SAP Portal directory traversal vulnerability
• NEW check for SAP NetWeaver ipcpricing server side request forgery
• NEW check for SAP Management Console list logfiles
• NEW check for SAP Management Console get user list
• NEW check for SAP NetWeaver server info information disclosure
• NEW check for SAP Knowledge Management and Collaboration (KMC) incorrect permissions
• NEW check for SAP NetWeaver Java AS WD_CHAT information disclosure vulnerability
• NEW check for SAP weak/predictable user credentials
• NEW check for OpenCms Solr XML External Entity (XXE) vulnerability
• NEW check for Confluence Widget Connector SSTI
• New check for Ruby source code disclosure
• NEW check for Python source code disclosure
• Added new WordPress Core and WordPress Plugins vulnerability checks
• Added new Drupal Core vulnerability checks
• Added new Joomla Core vulnerability checks

Updates

• Multiple improvements to the detection of Blind SQL Injection
• Improved the Error Messages vulnerability check
• Improved the Adobe Experience Manager tests
• Improved detection of Java Deserialization and Mongo alert deduplication
• Improved detection of Rails accept file content disclosure
• Updated alert details for Oracle WebLogic Remote Code Execution via T3 (CVE-2018-3245)
• Improved detection of Confluence
• Improved PHP AcuSensor when used on nginx
• Improved detection of PHP code injection
• Updated Directory Traversal Check to make fewer requests
• Multiple improvements to DeepScan and the LSR
• Implemented support for WebSockets in LSR and Deepscan

Fixes

• Fixed a few crashes
• Fixed issue causing Postcrawl scripts to not be executed on folders
• Fixed: Custom cookies could be used twice when the application sets the same cookies
• Cookie processing now ignores leading . in domain
• Fixed issue with LSR when used on Internet Explorer
• Fixed issue with HTTP Authentication
• Fixed false positive in Struts_RCE_S2-052_CVE-2017-9805
• Fixed severity level for CSRF vulnerability check
• Fixed False Negative in Mercurial repository found check
• Fixed issue causing site structure not to be updated with locations identified by vulnerability scripts

New Features

• Verified vulnerabilities are now indicated by Acunetix

New Vulnerability Checks

• Test for PHP opcache-status page
• Test for Arbitrary File Read in Next.js
• Test for Nagios XI Magpie_debug.php Unauthenticated RCE (CVE-2018-15708)
• Test for Horde Imp Unauthenticated Remote Command Execution
• Test for Cisco Identity Service Engine XSS (CVE-2018-15440)
• Test for publicly available Apache balancer-manager application
• Test for Rails File Content Disclosure in Action View (CVE-2019-5418)
• Test for Apache Solr Deserialization of untrusted data via jmx.serviceUrl (CVE-2019-0192)
• Added a test for /jolokia
• Updated XSS checks to detect vulnerabilities on newer versions of Apache Tomcat
• Added new WordPress Core and WordPress Plugins vulnerability checks

Updates

• Updated Directory Traversal vulnerability check
• Improved detection of Blind SQL Injection
• On Linux, OOM Killer will now stop less important processes
• Improve handling of XHR requests in Deepscan
• Multiple improvements to the LSR and Session detection
• Scan Stats are now retained between Pause/Resume
• Improved the detection of paths from JSON and XML
• Improve techniques used to detect type of input in web form
• Multiple minor UI updates

Fixes

• Fixed multiple instances of scanner stopping unexpectedly
• Fixed false positive reported by WordPress plugin All in One SEO Pack privielege escalation check
• Fixed issue causing the same web application to be detected multiple times
• Some vulnerability alerts did not show the HTTP Response
• Fixed issue causing incorrect processing of default values in forms
• HTTP redirects were not being detected
• Fixed issue in File Upload XSS vulnerability check
• Fixed issue causing PerFolder scripts not to be executed on all folders
• Fixed issue causing HAR file importing to fail
• Fixed issue causing LSR to fail to load Target with uppercase address
• Fixed issue causing SharePoint Reflected Cross-Site Scripting (CVE-2017-8514) not to be reported

Updates

• Improved scanning of .NET web applications
• Improved processing of CSS files
• 40% speed improvement when parsing pages
• Various updates to WSDL processing

Fixes

• Some invalid URLs were being incorrectly reported as external hosts
• Fixed issue causing communication problem between scanner and backend
• Allowed hosts were not always being scanned
• Integrated LSR was not always working on Internet Explorer 11
• Fixed LSR display problem when browser window is zoomed or resized
• Fixed issue when importing Burp State file

Updates

• HTTP response size limit has been increased to 20Mb
• Swagger parser now supports yml files

Fixes

• Fixed a scanner crash
• Fixed: Login Sequence Recorder was not using the User-Agent configured for the Target
• Fixed issue causing false positives in ‘User controllable charset’ and ‘User controllable script source’
• Fixed issue with BURP state file importer
• Fixed: Users could not update an expired POC license