Tenable Security Center 5.20.0 Release Notes (2022-01-05)

New Features

Asset Host View

Added a Host View table where you can see details about the asset, associated findings (vulnerabilities), and the associated software inventory.

For more information, see View Hosts in the Tenable Security Center User Guide.

Asset Criticality Rating (ACR)

Added in automatic calculation of Asset Criticality Rating (ACR) to be used as part of a Risk Based Approach to Vulnerability Management. Automatic ACR calculation can also be overridden to reflect the most accurate picture of each of your Assets criticality to your environment. ACR can be used throughout Tenable Security Center. Note this feature requires a Tenable Security Center+ license.

Note: As part of the initial ACR score calculation which occurs after the initial Tenable Security Center 5.20.0 installation or upgrade, you must re-scan each host to ensure that Tenable Security Center has the data required to calculate an ACR score. Until that re-scan has been completed, some hosts may not have an ACR score assigned.

UI Improvements

To give our users a more updated and consistent experience across Tenable products, we have made the following enhancements:

• Single button to refresh all dashboard components

• Dashboard enhancements and modernization

• Tab modernization throughout Tenable Security Center

• Enhanced template creation experience

• Enhanced filter experience

• Dark mode severity colors update to align with light mode color scheme

Manage Tenable Nessus Scanners in Tenable Security Center

Added the ability to manage the Tenable Nessus scanners directly in the Tenable Security Center UI.

For more information, see Picture in Picture in the Tenable Security Center User Guide.

Backup and Restore Tenable Security Center Configuration Data

Added the ability to backup and restore Tenable Security Center configuration data.

For more information, see Configuration Backups in the Tenable Security Center User Guide.

Advanced Agent Scan Policy

Added support for adding an Advanced Agent Scan Policy directly in Tenable Security Center.

For more information, see Agent Scans in the Tenable Security Center User Guide.

Tenable Security Center File Integrity Check

Added the ability to check the integrity of critical Tenable Security Center files.

For more information, see Diagnostics Settings in the Tenable Security Center User Guide.

Enhanced Diagnostics

Added additional output items to the diagnostics capability of Tenable Security Center.

For more information, see Diagnostics File Options in the Tenable Security Center User Guide.

Updated Third Party Integrations

The following integrations have been enhanced:

• Tenable Security Center now works with the CyberArk 2.0 APIs

• Tenable Security Center now allows for credential support when assessing MongoDB

For more information, see SSH Credentials, Windows Credentials, and Database Credentials in the Tenable Security Center User Guide.

Changed Functionality and Performance Enhancements

Display Name in Plugin 19506

Tenable Security Center now shows the scan name in Plugin 19506.

Deprecated Shibboleth 1.3

Tenable Security Center no longer supports Shibboleth 1.3. Shibboleth 2.0 continues to be supported.

Deprecated Scan Policy Templates

Tenable Security Center 5.20.0 no longer supports the following scan policy templates:

• Badlock detection

• Bash Shellshock detection

• DROWN detection

• Shadow Brokers Scan

You cannot create a new scan policy using a deprecated template using the Tenable Security Center UI or API. If you have an existing scan policy using one of these deprecated templates, you can continue to view, edit, and use the templates in scans.

Security Updates

• Removed the SecurityCenter Version header from all Tenable Security Center API calls to prevent unauthorized users from determining the currently running Tenable Security Center version.

Bug Fixes

Bug Fix	Defect ID
Fixed an issue where upgrading to Tenable Security Center 5.19 resulted in a database backup error.	01243705
Corrected an issue where the Plugin Timestamp was displaying incorrectly.	01289970
Corrected an issue when selecting an invalid interval on the scheduling API caused a job daemon to crash.	01276243
Fixed a discrepancy when using filtering in asset lists.	01263324
Fixed an issue where Invalid Scan Zones was reported after re-adding a scanner.	01260386
Corrected an issue where the % usage of repository size was showing incorrectly.	01274320
Corrected an issue syncing Dynamic Assets to Tenable Vulnerability Management Tags when the Tenable Vulnerability Management Networks feature is disabled.	01251591
Corrected an issue where the status of Tenable Nessus Network Monitor scanners initially displays incorrectly in the Options -> Update Status screen.	01267931
Corrected an issue in Tenable Security Center Director which resulted in a Fingerprint Mismatch or Protocol Error.	01266404
Corrected a Remote Repository sync issue that occurred in rare instances under certain conditions.	01246158
Fixed an issue leading to query errors in the Vulnerability Analysis drill downs when a selected filter returned no matches.	01194875
Corrected an issue that was causing an internal port range error on the Internal PCI Audit Template.	01248527
Fixed an issue where other installations could no longer set up remote agent repositories against the current one.	01252376
Corrected an issue where under certain circumstances a regular user could view the User page.	01252321
Resolved an issue when building an SCAP results file against a large number of hosts.	01246830
Corrected a display issue when rendering a large amount of reports in the Report Results page.	01248675
Corrected an issue where a report would not generate correctly under certain circumstances.	01245189
Resolved an issue where the Output Asset Filter was removed when browsing Dashboard Component Data.	01220853
Corrected an issue where filtering by tags on the Assets page would lead to an error.	01241243
Aligned the list of ignored plugins qualifying assets against the Tenable Security Center license with that of Tenable Vulnerability Management.	01219651
Corrected an issue when filters on the Vulnerability Analysis page would incorrectly be removed upon clearing values.	01220587
Correct a rare issue where asset information incorrectly displayed information from a different asset.	01219813
Corrected a formatting issue when creating a PDF that contained certain special characters.	01193789
A version check has been added so that the Tenable Security Center RPM can't be installed on the wrong OS version. An error message will be shown and the installation will stop if the user attempts to install on the wrong OS version.	N/A
Corrected an issue with Airwatch integration.	01123262
Deprecated "Network Type" has been removed from scan policy creation options.	01088164
Added optimizations when editing and deleting application-level Credentials, Audit Files, and Scan Policies to improve performance.	00711536
Corrected an issue where under certain circumstances Remediation Scans would error out.	00635591
Corrected a parsing issue in reports for the <> symbols.	00512200

Known Issues

• Log Correlation Engine Archived Silos cannot be selected in the Tenable Security Center UI

API Changelog

For more information about the API changes for this release, see the Tenable Security Center API Changelog.

Filenames and Checksums

Filenames and MD5 or SHA-256 checksums are located on the Tenable Security Center Downloads page.