Acunetix releases IAST support for WebSphere and improves crawling of SPAs
July 14, 2022 - This Acunetix release introduces IAST support for WebSphere enabling the use of the Java IAST sensor (AcuSensor) with this Java server. In addition, Acunetix DeepScan has been updated to better scan single-page applications (SPAs), allowing for better identification of the APIs used by the web application. The Acunetix UI received additional updates, including the feature to copy the HTTP request used to identify a vulnerability to a cURL command. This Acunetix update also includes a number of new vulnerability checks, updates, improvements, and product fixes.
New features
- Java IAST AcuSensor can now be used on WebSphere
- HTTP requests can be copied as cURL commands from the vulnerability data
New vulnerability checks
- New check for the DotCMS unrestricted file upload ( CVE-2022-26352 )
- New check for the .NET JSON.NET deserialization RCE
- New check for the unauthenticated RCE in Confluence Server and Data Center ( CVE-2022-26134 )
- New check for the authentication bypass via MongoDB operator injection
- New check for the MongoDB $where operator JavaScript injection
Updates
- Multiple DeepScan updates that improve crawling of single-page applications (SPAs)
- Upgraded Chromium to v103.0.5060.114
- Improved handling of installed.json by the PHP IAST AcuSensor
- SCA, AcuMonitor (OOB vulnerability checks), and URL malware checks now require Acunetix Online Services to be enabled in the user profile
- Updated the MongoDB injection checks
- Various UI updates and fixes
Fixes
- Multiple fixes in the Java and .NET IAST AcuSensors
- Fixed a false negative in the Possible virtual host found check
- Fixed a bug causing CSRF tokens to be retrieved using HTTP
- Fixed a false positive in the Apache HTTP server source code disclosure check
If you are already using Acunetix build 14.x, you can initiate the automatic upgrade from the new build notification in the Acunetix UI > About page.
Acunetix Web Vulnerability Scanner, Acunetix Premium and all other Acunetix solutions are available in Romania through Simple IT, Acunetix Partner in Romania.
About Simple IT
SIMPLE IT is a distributor for software solutions and hardware appliances, adding value with consulting, training, implementation, configuration and support services, backed by certified specialists, in order to offer the best IT experience to customers and partners. For more information, please visit www.simpleit.com.ro.