Loading...
Security Resources

Software Updates

TrustKeeper Scan Engine Update for January 08, 2021

Summary

The latest update to the TrustKeeper scan engine that powers our Trustwave Vulnerability Management product (including both internal and external vulnerability scanning) is now available. Enjoy!


New Vulnerability Test Highlights

Some of the more interesting vulnerability tests we added recently are as follows:

Adobe

  • Adobe ColdFusion CKEditor Unrestricted File Upload (APSB18-33) (CVE-2018-15961)

Atlassian

  • Atlassian Crowd pdkinstall Development Plugin Incorrectly Enabled (CVE-2019-11580)

Debian

ManageEngine

  • ManageEngine Desktop Central getChartImage Remote Code Execution (CVE-2020-10189) (CVE-2020-10189)
  • ManageEngine ServiceDesk Plus Arbitrary File Upload Vulnerability (CVE-2019-8394) (CVE-2019-8394)
  • ManageEngine ServiceDesk Plus MSP Insecure Direct Object Reference Vulnerability (CVE-2019-8394) (CVE-2019-8394)

pcAmerica

  • Cash Register Express detection

Ubuntu (Credentialed Checks)

How to Update?

All Trustwave customers using the TrustKeeper Scan Engine receive the updates automatically as soon as an update is available. No action is required.