ServiceNow Platform 的輸入驗證弱點 (CVE-2024-4879) (直接檢查)

critical Nessus Plugin ID 214850

語言:

版本 1.17 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
版本 1.16 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
版本 1.14 Oct 22, 2025, 12:32 PM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin Feed: 202510221232
版本 1.13 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
版本 1.11 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
版本 1.10 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
版本 1.8 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
版本 1.7 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
版本 1.6 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
版本 1.5 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
版本 1.4 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
版本 1.2 Feb 1, 2025, 3:24 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CISA reference Plugin Feed: 202502011524
版本 1.1 Jan 31, 2025, 7:12 PM New Plugin Feed: 202501311912

* Changelogs are generally available for changes made after Nov 1, 2022