VMWare Aria Operations for Networks 驗證繞過 (CVE-2023-34039) (直接檢查)

critical Nessus Plugin ID 183238

語言:

版本 1.88 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
版本 1.87 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
版本 1.85 Oct 21, 2025, 3:09 AM Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.) Plugin Feed: 202510210309
版本 1.84 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
版本 1.82 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
版本 1.81 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
版本 1.79 Aug 26, 2025, 7:20 AM Logic Changes Plugin Feed: 202508260720
版本 1.78 Jul 28, 2025, 4:47 PM Logic Changes (RSA SSH certificates can use SHA2 signatures when needed) Plugin Feed: 202507281647
版本 1.77 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
版本 1.76 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
版本 1.75 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
版本 1.74 Jun 16, 2025, 4:11 PM Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
版本 1.73 May 28, 2025, 9:47 AM Logic Changes (Streamline SSH compatibility code) Plugin Feed: 202505280947
版本 1.72 Apr 28, 2025, 4:40 PM Logic Changes (Handling absence of SSH privilege escalation uniformly across products) Plugin Feed: 202504281640
版本 1.71 Apr 1, 2025, 12:23 AM Logic Changes (Handle Cisco devices that echo command and prompt before command results.) Plugin Feed: 202504010023
版本 1.70 Mar 20, 2025, 7:47 AM Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.) Plugin Feed: 202503200747
版本 1.69 Mar 6, 2025, 7:23 AM Detection (Handle long MOTD with pagination on Nokia devices.) Plugin Feed: 202503060723
版本 1.68 Mar 3, 2025, 5:54 PM Logic Changes (improve detection for some devices) Plugin Feed: 202503031754
版本 1.67 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
版本 1.66 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
版本 1.65 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
版本 1.63 Jan 22, 2025, 5:44 PM New Plugin Feed: 202501221744
版本 1.62 Jan 21, 2025, 6:17 PM Detection (Add SSH local checks support for Union Tech UOS) Logic Changes (Tighten recognition of need to escalate.) Plugin Feed: 202501211817
版本 1.58 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
版本 1.54 Dec 30, 2024, 4:30 PM Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.) Plugin Feed: 202412301630
版本 1.53 Dec 18, 2024, 9:32 PM Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts) Plugin Feed: 202412182132
版本 1.52 Dec 18, 2024, 7:05 AM Detection (Fixed SSH authentication using the "none" method) Plugin Feed: 202412180705
版本 1.51 Dec 6, 2024, 8:13 PM Detection (Better debugging related to local checks evaluations) Plugin Feed: 202412062013
版本 1.50 Dec 3, 2024, 3:59 PM Detection (Support Azure Linux for generated package plugins.) Plugin Feed: 202412031559
版本 1.49 Nov 22, 2024, 6:54 PM Logic Changes (Fixed installation reporting) Plugin Feed: 202411221854
版本 1.48 Nov 12, 2024, 8:29 PM Logic Changes (Adding installs report) Plugin Feed: 202411122029
版本 1.47 Nov 6, 2024, 2:41 PM Detection (adding support for Forescout CounterACT) Plugin Feed: 202411061441
版本 1.46 Oct 10, 2024, 11:57 PM New Plugin Feed: 202410102357
版本 1.45 Oct 10, 2024, 4:58 AM Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.) Plugin Feed: 202410100458
版本 1.43 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
版本 1.42 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
版本 1.40 Sep 3, 2024, 5:26 PM Detection (Support for Aruba CPPM SSH based local checks) Plugin Feed: 202409031726
版本 1.39 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
版本 1.38 Aug 8, 2024, 4:43 PM Logic Changes (Support OpenSSH private key formats for authentication.) Plugin Feed: 202408081643
版本 1.35 Jul 24, 2024, 6:31 PM Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family) Plugin Feed: 202407241831
版本 1.33 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
版本 1.32 Jul 6, 2024, 12:22 AM Detection (Changes to support Juniper Session Smart Router) Plugin Feed: 202407060022
版本 1.31 Jul 5, 2024, 9:04 PM Detection (Adding detection of Juniper SSR devices) Plugin Feed: 202407052104
版本 1.30 Jun 27, 2024, 9:09 PM New (Deploy nessus_utils binaries on the Nessus Agent) Plugin Feed: 202406272109
版本 1.28 Jun 21, 2024, 6:31 PM Detection (updated detection for SonicOS devices) Plugin Feed: 202406211831
版本 1.27 Jun 21, 2024, 2:16 PM Logic Changes Plugin Feed: 202406211416
版本 1.26 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
版本 1.23 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
版本 1.18 Feb 9, 2024, 11:22 AM New Plugin Feed: 202402091122
版本 1.17 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
版本 1.15 Jan 16, 2024, 5:39 PM Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
版本 1.13 Jan 15, 2024, 12:45 PM Detection Plugin Feed: 202401151245
版本 1.10 Dec 6, 2023, 12:08 AM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312060008
版本 1.9 Dec 5, 2023, 9:49 PM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312052149
版本 1.8 Nov 28, 2023, 11:17 AM Detection (Fixing detection of Cisco Firepower devices) Plugin Feed: 202311281117
版本 1.7 Nov 27, 2023, 6:11 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271811
版本 1.6 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
版本 1.6 Nov 27, 2023, 4:16 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271616
版本 1.5 Oct 30, 2023, 1:08 PM Detection (Fixed detection of JUNOS) Plugin Feed: 202310301308
版本 1.4 Oct 25, 2023, 5:17 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Detection (Handle SSH exec hang and pagination ctrl codes for PanOS) Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202310251717
版本 1.1 Oct 18, 2023, 7:26 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 score source (set to "CVE-2023-34039") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" set to "Exploits are available") Plugin Feed: 202310181926
版本 1.0 Oct 17, 2023, 9:33 PM New Plugin Feed: 202310172133

* Changelogs are generally available for changes made after Nov 1, 2022