Magazine Template

Acunetix releases IAST support for WebSphere and improves crawling of SPAs

July 14, 2022 - This Acunetix release introduces IAST support for WebSphere enabling the use of the Java IAST sensor (AcuSensor) with this Java server. In addition, Acunetix DeepScan has been updated to better scan single-page applications (SPAs), allowing for better identification of the APIs used by the web application. The Acunetix UI received additional updates, including the feature to copy the HTTP request used to identify a vulnerability to a cURL command. This Acunetix update also includes a number of new vulnerability checks, updates, improvements, and product fixes.

New features

• Java IAST AcuSensor can now be used on WebSphere
• HTTP requests can be copied as cURL commands from the vulnerability data

New vulnerability checks

• New check for the DotCMS unrestricted file upload ( CVE-2022-26352 )
• New check for the .NET JSON.NET deserialization RCE
• New check for the unauthenticated RCE in Confluence Server and Data Center ( CVE-2022-26134 )
• New check for the authentication bypass via MongoDB operator injection
• New check for the MongoDB $where operator JavaScript injection

Updates

• Multiple DeepScan updates that improve crawling of single-page applications (SPAs)
• Upgraded Chromium to v103.0.5060.114
• Improved handling of installed.json by the PHP IAST AcuSensor
• SCA, AcuMonitor (OOB vulnerability checks), and URL malware checks now require Acunetix Online Services  to be enabled in the user profile
• Updated the MongoDB injection checks
• Various UI updates and fixes

Fixes

• Multiple fixes in the Java and .NET IAST AcuSensors
• Fixed a false negative in the Possible virtual host found  check
• Fixed a bug causing CSRF tokens to be retrieved using HTTP
• Fixed a false positive in the Apache HTTP server source code disclosure check

If you are already using Acunetix build 14.x, you can initiate the automatic upgrade from the new build notification in the Acunetix UI > About page.

Acunetix Web Vulnerability Scanner, Acunetix Premium and all other Acunetix solutions are available in UK through Simple IT Distribution LTD, Acunetix Partner in UK.

About Simple IT Distribution LTD

Simple IT Distribution LTD is backed by 10 years of experience in Value Added IT Distribution. What sets us apart from the crowd is our customer-centric approach, the quality services (consulting, implementation, training, support), and the people behind them, which are experienced and certified proffessionals. We provide sales and technical advice and deliver the solutions that best meed our customers' diverse technology needs. Our partners are hand-picked from the top vendors, and we back up their solutions with certified professionals, to give you nothing but the best.

For more information, please visit www.simpleit-distribution.co.uk .