Tenable Web App Scanning Scanner 1.9.x Release Notes
The Tenable Web App Scanning Scanner automatically updates to new releases:
- Tenable Web App Scanning Cloud Scanner – Updated automatically by Tenable.
- Tenable Core + Tenable Web App Scanning Linked Scanner – Updated automatically by Tenable Core.
For information about the new features, improvements, and bug fixes included in each 1.9.x release, see:
Tenable Web App Scanning Scanner 1.9.8 (2021-01-22)
Bug Fixes
Tenable Web App Scanning Scanner version 1.9.8 includes the following bug fixes.
| Bug Fixes | Defect ID |
|---|---|
| Selenium Authentication failure due to UTF8 encoding issues | 01148678 |
| Improved plugin 98983 (Insecure Cross-Origin Resource Sharing Configuration) performance | N/A |
Tenable Web App Scanning Scanner 1.9.6 (2021-01-07)
New Features and Improvements
Tenable Web App Scanning Scanner version 1.9.6 includes the following new features and improvements.
- Other Improvements
-
Addressed potential DNS resolution failures. The Tenable Web App Scanning scanner now tries up to 5 times to perform any DNS resolution if previous attempts fail.
-
Bug Fixes
Tenable Web App Scanning Scanner version 1.9.6 includes the following bug fixes.
| Bug Fixes | Defect ID |
|---|---|
| Plugin 98780 False Positive | 01119896 |
| On-premise scanner error when pushing status to platform for aborted scans | 01127687 |
| DNS Resolution failed for target URL | 01139211 |
| Target excluded scan note not used when target is excluded based on user exclusion list | 01138921 |
| Plugin 98112 False Positive | 01138319 |
| DNS Resolution failed for target URL | 01143166 |
| On-premise scanner error when pushing status to platform for aborted scans | 01137565 |
Tenable Web App Scanning Scanner 1.9.5 (2020-12-23)
New Features and Improvements
Tenable Web App Scanning Scanner version 1.9.5 includes the following new features and improvements.
- Other Improvements
-
Added additional troubleshooting for debugging scan anomalies.
-
Bug Fixes
Tenable Web App Scanning Scanner version 1.9.5 includes the following bug fixes.
| Bug Fixes | Defect ID |
|---|---|
| Tenable Web App Scanning scans aborted due to thread resources | 01126486 |
| Tenable Web App Scanning scans aborted due to thread resources | 01136955 |
Tenable Web App Scanning Scanner 1.9.1 (2020-12-17)
New Features and Improvements
Tenable Web App Scanning Scanner version 1.9.1 includes the following new features and improvements.
- Other Improvements
-
Updated the scan finalization process to ensure scans are marked as completed instead of aborted due to missing heartbeat.
-
Bug Fixes
Tenable Web App Scanning Scanner version 1.9.1 includes the following bug fixes.
| Bug Fixes | Defect ID |
|---|---|
| Plugin 98097 (Backdoor Detection) false positive | 01130954 |
Tenable Web App Scanning Scanner 1.9.0 (2020-12-15)
New Features and Improvements
Tenable Web App Scanning Scanner version 1.9.0 includes the following new features and improvements.
- Increased Selenium IDE Command Support
Expanded the support of Selenium commands that can be included in a Selenium script. All only commands are now supported except the ones related to execution flow commands (if, else, before, end, etc.), variable storage (store, store json, etc.), and window selection (selectWindow).
- Flexible Session Verification Pattern Matching Logic
Tenable Web App Scanning scanner now allows the Session Verification Pattern option for all Tenable Web App Scanning credentials to be simple text contents that the scanner will search using exact text matching in addition to regular expression matching. This facilitates the authentication setup process for cases when a regular expression is not needed.
- Improved Plugin 98044 Troubleshooting
The output of plugin 98044 (Scan aborted after being logged out) now includes the same level of detail as authentication plugins for troubleshooting why the scanner was unable to log back in to web applications. This allows users to better understand why the scanner cannot authenticate back to the target so they can address the issue by themselves.
- New Plugins
- Other Improvements
-
Sitemap results are now updated for URLs discovered with fragments, and includes the reason why the URL is not crawled but audited by the scanner browser.
-
OpenAPI / Swagger files containing control characters or non-ASCII characters can now be processed by the scanner.
-
Bug Fixes
Tenable Web App Scanning Scanner version 1.9.0 includes the following bug fixes.
| Bug Fixes | Defect ID |
|---|---|
| URLs with fragments not updated in sitemap results | 01121015 |
| Plugin 98097 Detection Inconsistencies | 01095490 |