偵測

可能遭到 Microsoft Exchange CVE-2022-41040 / CVE-2022-41082 攻擊程式的攻擊

high Nessus Plugin ID 165629

語言:

版本 1.84

Oct 22, 2025, 12:32 PM

  • CVSS metrics ("CVSSv3 score" set to 8.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv3 score source (changed from "CVE-2022-41082" to none)

Plugin Feed: 202510221232

版本 1.83

Oct 8, 2025, 9:19 AM

  • Logic Changes (Allow forking plugins to report all installs for structured vuln data.)

Plugin Feed: 202510080919

版本 1.82

Sep 30, 2025, 12:41 AM

  • Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.)

Plugin Feed: 202509300041

版本 1.80

Jul 22, 2025, 3:24 AM

  • Detection (Turn off failover to NTLM if 'only_use_kerberos' is set.)

Plugin Feed: 202507220324

版本 1.79

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

版本 1.78

Jul 10, 2025, 5:41 PM

  • Logic Changes (Windows CA support)

Plugin Feed: 202507101741

版本 1.77

Jun 27, 2025, 8:01 PM

  • Logic Changes

Plugin Feed: 202506272001

版本 1.76

Jun 23, 2025, 9:47 PM

  • Logic Changes

Plugin Feed: 202506232147

版本 1.75

Jun 16, 2025, 4:11 PM

  • Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.)

Plugin Feed: 202506161611

版本 1.73

May 5, 2025, 9:35 AM

  • Exploit attributes ("Exploited by malware" set to "True")

Plugin Feed: 202505050935

版本 1.72

Apr 4, 2025, 9:01 PM

  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSS metrics ("CVSSv3 score" set to 8.0)
  • CVSSv3 score source (set to "CVE-2022-41082")

Plugin Feed: 202504042101

版本 1.71

Mar 31, 2025, 5:13 PM

  • Detection (Improvements to OS detection results. adding remote detection support for SEoL plugins)

Plugin Feed: 202503311713

版本 1.69

Feb 12, 2025, 3:29 PM

  • Logic Changes

Plugin Feed: 202502121529

版本 1.68

Feb 12, 2025, 1:58 AM

  • Logic Changes

Plugin Feed: 202502120158

版本 1.67

Feb 10, 2025, 4:00 PM

  • Logic Changes

Plugin Feed: 202502101600

版本 1.64

Jan 15, 2025, 1:31 AM

  • Logic Changes (Structured vuln reporting for MS Rollups)

Plugin Feed: 202501150131

版本 1.63

Jan 13, 2025, 10:27 PM

  • New

Plugin Feed: 202501132227

版本 1.59

Nov 22, 2024, 6:54 PM

  • Logic Changes (Fixed installation reporting)

Plugin Feed: 202411221854

版本 1.58

Nov 12, 2024, 8:29 PM

  • Logic Changes (Adding installs report)

Plugin Feed: 202411122029

版本 1.57

Oct 10, 2024, 11:57 PM

  • New

Plugin Feed: 202410102357

版本 1.56

Sep 3, 2024, 11:47 PM

  • Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins)

Plugin Feed: 202409032347

版本 1.54

Aug 14, 2024, 8:33 PM

  • Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning)

Plugin Feed: 202408142033

版本 1.53

Aug 6, 2024, 4:43 PM

  • Detection (Fix to allow Nessus Agent audits to query security settings registry key default values.)

Plugin Feed: 202408061643

版本 1.49

Jul 17, 2024, 11:02 PM

  • Logic Changes

Plugin Feed: 202407172302

版本 1.47

May 20, 2024, 10:13 AM

  • Logic Changes

Plugin Feed: 202405201013

版本 1.41

Mar 19, 2024, 6:40 PM

  • Logic Changes (Improving logging to reduce disk space usage)

Plugin Feed: 202403191840

版本 1.40

Mar 5, 2024, 2:40 PM

  • Detection (improved file verification for Windows Agents)

Plugin Feed: 202403051440

版本 1.39

Mar 5, 2024, 1:15 AM

  • Logic Changes (Report structured data for Microsoft Exchange checks.. Report structured data for RPM version checks.)

Plugin Feed: 202403050115

版本 1.34

Jan 16, 2024, 8:55 PM

  • Logic Changes (Improving debug logging)

Plugin Feed: 202401162055

版本 1.33

Jan 16, 2024, 5:39 PM

  • Detection (Support privacy mode DCOM over Kerberos)
  • Logic Changes (Improving debug logging)

Plugin Feed: 202401161739

版本 1.32

Dec 26, 2023, 2:33 PM

  • CVSSv2 score source (changed from "CVE-2022-41082" to "CVE-2022-41040")

Plugin Feed: 202312261433

版本 1.31

Nov 14, 2023, 4:21 PM

  • Detection (Support SHA2 based encryption for Kerberos)

Plugin Feed: 202311141621

版本 1.29

Sep 26, 2023, 8:16 PM

  • Logic Changes

Plugin Feed: 202309262016

版本 1.28

Jul 17, 2023, 5:15 PM

  • Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii())

Plugin Feed: 202307171715

版本 1.27

Jul 10, 2023, 7:11 PM

  • Logic Changes (Restrict ClientHello ciphersuites by encapsulation)

Plugin Feed: 202307101911

版本 1.26

Jun 20, 2023, 9:07 PM

  • Logic Changes (Temporarily limit debug logging)

Plugin Feed: 202306202107

版本 1.25

Jun 9, 2023, 12:10 AM

  • Logic Changes (Fix two function returns)

Plugin Feed: 202306090010

版本 1.24

Jun 1, 2023, 5:27 AM

  • Logic Changes (Better logging)

Plugin Feed: 202306010527

版本 1.23

May 16, 2023, 7:02 PM

  • Detection (Authenticate WMI/DCOM using Kerberos credentials.)

Plugin Feed: 202305161902

版本 1.21

May 1, 2023, 9:07 PM

  • Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().)

Plugin Feed: 202305012107

版本 1.18

Apr 6, 2023, 6:58 PM

  • Detection (Add Kerberos debug logging)

Plugin Feed: 202304061858

版本 1.16

Mar 8, 2023, 1:05 AM

  • Logic Changes

Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022