SecurityCenter 5.6.1 Release Notes - 12/18/2017

Upgrade Notes

• Cyberark update: We have added additional fields for the Cyberark AIM Web Service

• If you are running version 4.8.2 or later, upgrade to version 5.4.0 before upgrading to version 5.6.1.
• If you are running version 5.4.0 or later, upgrade directly to version 5.6.1.

Bug Fixes

• The column "vault_cyberark_url" column was missing from the "AppSSHCredential" and "SSHCredential" tables on a upgrade.

• SCAP Scan import fix

• Allow users to set the default timeframe for scan results

• Repository import fix between multiple SecurityCenter instances.

• Remote Repository Username / Password fix

• Renamed Enabled Cached Fetching field

• “CyberArk Account Details Name” is set to “true” for SSH CyberArk Vault credential with su privilege escalation

• Scans stuck during import fix

• Thycotic authentication fix

• IAVM 2017-A-0327 Multiple Vulnerabilities in OpenSSL fix upgraded version of OpenSSL to 1.0.2n

• Scans stuck in pending fix reenabled multithreading for scan imports

• Security Center 5.5.2 - LDAP fix allow SC users to associate with different LDAP servers after getting created.

• Customer can now create user/define a scan using install account when managed by SC

• SQL error: too many attached databases fix

• Fixed error while running query: URL: rest/lce/eventTypes?fields=df [GET] fixed error parsing utf-8 characters in custom LCE types

Third-Party Product Updates

For more information, see the Security Advisory.

Third-Party Product	Updated to Address
OpenSSL 1.0.2n-fips	CVE-2017-3737 CVE-2017-3738