Released: Oct 19, 2022

12.4 での更新項目

機能

Scan Engine

• Added support for scanning OpenShift/Kubernetes.
• Added support for Microsoft Windows Certificate Store on Windows.
• Added Whitelisting support for SaaS Usage Discovery.
• OracleDB scanner (oratrack) no longer uses log4j library. Due to security concerns, the tool has been rewritten by replacing the library with a secure implementation.
• Apple macOS packages for the Inventory Agent are now digitally signed.
• [NDTRACK] Improved scanning for various co-existing versions of Microsoft SQL server by ndtrack.
• [INVENTORY AGENT] The RAM consumption in RVIA has been improved by optimizing code and places where memory leaks could happen.
• Improved descriptions of configuration of remote execution and Hyper-V properties.
• Improved recognition and display of operating system logos on the sidebar (Microsoft Windows Server 2019, 2022 and macOS).
• If a DNS name cannot be resolved, the hostname property from VMware API is now used in vSphere scans.
• [ORATRACK] Improved timeout management for long-running java.exe processes, which may happen occasionally when running oratrack in combination with DFUS.
• Improved performance of the device list with large number of computers for subsequent operations.
• Windows 11 and Windows Server 2022 are now recognized during the Microsoft Active Directory discovery.
• Made many internal improvements to Zero-Touch scanner, optimized usage of commands and improved process handling on certain distributions.
• [NDTRACK] Added plugins and additional auxiliary files to the standard NDTRACK Agent installation sources.
• Improved performance of RayVentory Scan Engine UI when loading large number of devices.
• Improved stability and performance of the built-in HTTP server for incoming upload files.
• Improved handling of Cyberark-related errors.
• Scanning for OracleDB now supports custom SSH ports.
• Improved scanning and recognition of video controllers on non-Windows systems.

Data Hub

• Added Single Sign-on and support for external identity providers.
• Added new and updated Cloud Connectors.
• Added a new way of browsing the raw data.
• Added scrollable (vertical) dashboards.
• Added support for Advanced Transformation Editing (JSON).
• Added the ability to download log files from the Task view.
• Added an interactive viewer of raw and transformed data.
• Added extra information and in-app help for Cloud Connectors.
• Added new Default Vulnerability Management dashboards.
• Added new Default OS Reporting dashboard.
• Added support for Custom Attributes from RayVentory Catalog.
• Removed detailed stack trace from exceptions in case finding a task by table name fails. (CVSS 3.1 scoring = 5.3).
• [DATA TRANSFORMATION] Logs for transformation tasks are now more detailed and easy to follow. For example, executed steps are referenced by their names and each step contains extra information about tables used and produced, the number of input and output rows, etc.
• [DATA TRANSFORMATION] Optimized disk space consumed by the transformation process. Depending on the size and structure of the transformation, up to 80-90% of savings can be expected.
• [DATA TRANSFORMATION] When migrating from 12.2 to 12.3 Update 1, the existing transformation definitions will now be automatically migrated to the new format.
• [DATA TRANSFORMATION] It is now possible to change the temporary location for transformation files and configure some further diagnostic options.
• [DOCKER] Configuring Docker containers is now much easier thanks to the idiomatic usage of environment variables. Additionally, these changes result in better login performance on both Microsoft Windows and Docker platform.
• Various improvements, resolved issues, and improved performance of the following cloud connectors:
  • 15five
  • Adobe Admin Console
  • AWS Organizations
  • Azure SDK
  • Big Query
  • Docusign
  • Google Cloud
  • Intune
  • Microsoft 365
  • Microsoft Azure Compute
  • Salesforce
  • SAP Qualtrics
  • Veeva Vault
  • VMware Airwatch
• [DEFAULT REPORTS] Many minor tweaks and fixes in the default set of reports.
• Tenant name is now displayed in the top bar next to the username.
• Improved handling of reboots by the agent. In this version, if the agent was rebooted during the execution of the task, it will restart the task once the reboot of the operating system is complete.
• [ECM CONNECTOR] SCCM connector has been renamed to ECM.
• While editing passwords (as parameters to cloud or on-prem connectors), it is now possible to reference variables.
• Improved sorting of tasks for a human-friendly sorting of numbers.
• On the login page, a button has been added to remember the user session. Visibility of this switch can be changed in the instance settings.
• [ACTIVE DIRECTORY] Improved querying for users by the Microsoft Active Directory connector.
• [DATA TRANSFORMATION] Improved stability, minor improvements and resolved minor issues in the transformation editor UI.
• Added automatic clean-up of task history entries. This setting is configurable from the configuration file/docker environment variables.
• It is now possible (although not recommended) to use SMTP servers without authentication.
• A new option Move to parent has been added to the Task context menu.
• Updating of cloud connectors is now possible without re-installing the product. This change is available for consultants and designed for better change management and testing.
• [CATALOG] It is now possible to define a fixed timeout for Catalog operations.
• Improved memory consumption of reports with huge number of sites.
• Improved contrast and colors in USU Discovery Data Hub.
• Internal standard reports optimizations.

不具合の修正

RayVentory Scan Engine 12.4

• [INVENTORY AGENT] Fixed a security issue where Inventory Agent could write sensitive information in event log when getting the configuration from Scan Engine.
• [INVENTORY AGENT] Fixed a security issue in Inventory Agent (non-Windows) in which the libraries were referenced by relative, not absolute paths.
• [INVENTORY AGENT] Fixed a security issues in Inventory Agent (rvia) non-Windows shell script, which was using relative paths to binary files. In the new version, all paths are absolute.

RayVentory Data Hub 12.4

• Fixed a security issue with handling of user sessions, which - under rare circumstances - when using the correct timing and certain unlikely preconditions, could lead to an issue known as "session hijacking".
• Fixed a security issue (CVSS 3.1 scoring = 4.3) where a user outside the Data Administrator group could access the list of tasks via REST API.
• Fixed a possible XSS injection in the history of changes view, where the input from the user was not properly escaped (CVSS 3.1 scoring = 4.6).
• Fixed a possible XSS injection using the file storage (CVSS 3.1 scoring = 4.6).
• Resolved security issues CVE-2020-9488, CVE-2018-10237, CVE-2021-4104, CVE-2018-1000844, CVE-2018-1000850, CVE-2021-43797 in various cloud connectors: KOT-13, KOT-14, KOT-15, KOT-16, KOT-17, KOT-18.