Tenable Web App Scanning Scanner 1.9.x Release Notes

The Tenable Web App Scanning Scanner automatically updates to new releases:

For information about the new features, improvements, and bug fixes included in each 1.9.x release, see:

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.8 includes the following bug fixes.

Bug Fixes Defect ID
Selenium Authentication failure due to UTF8 encoding issues 01148678
Improved plugin 98983 (Insecure Cross-Origin Resource Sharing Configuration) performance N/A

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.7 includes the following bug fixes.

Bug Fixes Defect ID
Tenable Web App Scanning scans running over 100 hours threshold without being stopped N/A

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.6 includes the following new features and improvements.

  • Other Improvements

    • Addressed potential DNS resolution failures. The Tenable Web App Scanning scanner now tries up to 5 times to perform any DNS resolution if previous attempts fail.

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.6 includes the following bug fixes.

Bug Fixes Defect ID
Plugin 98780 False Positive 01119896
On-premise scanner error when pushing status to platform for aborted scans 01127687
DNS Resolution failed for target URL 01139211
Target excluded scan note not used when target is excluded based on user exclusion list 01138921
Plugin 98112 False Positive 01138319
DNS Resolution failed for target URL 01143166
On-premise scanner error when pushing status to platform for aborted scans 01137565

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.5 includes the following new features and improvements.

  • Other Improvements

    • Added additional troubleshooting for debugging scan anomalies.

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.5 includes the following bug fixes.

Bug Fixes Defect ID
Tenable Web App Scanning scans aborted due to thread resources 01126486
Tenable Web App Scanning scans aborted due to thread resources 01136955

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.4 includes the following new features and improvements.

  • Other Improvements

    • Addressed zombie processes creation at browser instance termination.

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.3 includes the following new features and improvements.

  • Other Improvements

    • Added identification of zombie processes creation.

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.2 includes the following new features and improvements.

  • Other Improvements

    • Added additional troubleshooting for debugging scan anomalies.

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.1 includes the following new features and improvements.

  • Other Improvements

    • Updated the scan finalization process to ensure scans are marked as completed instead of aborted due to missing heartbeat.

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.1 includes the following bug fixes.

Bug Fixes Defect ID
Plugin 98097 (Backdoor Detection) false positive 01130954

New Features and Improvements

Tenable Web App Scanning Scanner version 1.9.0 includes the following new features and improvements.

  • Increased Selenium IDE Command Support

    Expanded the support of Selenium commands that can be included in a Selenium script. All only commands are now supported except the ones related to execution flow commands (if, else, before, end, etc.), variable storage (store, store json, etc.), and window selection (selectWindow).

  • Flexible Session Verification Pattern Matching Logic

    Tenable Web App Scanning scanner now allows the Session Verification Pattern option for all Tenable Web App Scanning credentials to be simple text contents that the scanner will search using exact text matching in addition to regular expression matching. This facilitates the authentication setup process for cases when a regular expression is not needed.

  • Improved Plugin 98044 Troubleshooting

    The output of plugin 98044 (Scan aborted after being logged out) now includes the same level of detail as authentication plugins for troubleshooting why the scanner was unable to log back in to web applications. This allows users to better understand why the scanner cannot authenticate back to the target so they can address the issue by themselves.

  • New Plugins
  • Other Improvements

    • Sitemap results are now updated for URLs discovered with fragments, and includes the reason why the URL is not crawled but audited by the scanner browser.

    • OpenAPI / Swagger files containing control characters or non-ASCII characters can now be processed by the scanner.

Bug Fixes

Tenable Web App Scanning Scanner version 1.9.0 includes the following bug fixes.

Bug Fixes Defect ID
URLs with fragments not updated in sitemap results 01121015
Plugin 98097 Detection Inconsistencies 01095490