Released: Jun 7, 2024

RayVentory Scan Engine 12.6.3666.89 [Update 3] での更新項目

機能

• Enhanced Input Validation and Sanitization:
  • User-controlled values are now validated and sanitized in all cases before being used for further command execution.
  • Special attention is now given to escape or encode control characters that the operating system might interpret as code.
  • The characters to be escaped or encoded can now be configured as needed.
  • To enable validation, perform the following configurations:
    • Linux/Unix/macOS - Added parsing of the configuration property ForbiddenCurlChars in /etc/rvia_configuration.
    • Windows - Added parsing of the registry value ForbiddenCurlChars in HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ManageSoftCorp\ManageSoft\RVIA.
• Restricted Folder Permissions - Permission to the results\Inventories\ folder has been restricted to enhance security.

不具合の修正

• Schedule Execution Fix - Fixed an issue where no schedules were executed at their described times. The problem was traced to generalMaxTaskDelay not being set to 0. This has now been corrected.