12-Aug-2020

NEW FEATURES

• Added IdP initiated SAML
• Upgraded the Invicti scanning engine to version 5.8.2.27669
• Added Pivotal Tracker integration
• Added support for SAML Assertion Encryption while configuring SSO

NEW SECURITY CHECKS

• Added an F5 Big IP LFI (CVE-2020-5902) attack pattern
• Added out of date checks for Apache Traffic Server
• Added version disclosure for Undertow Server
• Added out of date checks for Undertow Server
• Added version disclosure for Jenkins
• Added out of date checks for Jenkins
• Added signature detection for Kestrel
• Added detection for Tableau Server
• Added detection for Bomgar Remote Support Software
• Added version disclosure for Apache Traffic Server

IMPROVEMENTS

• A new Reset Agent Token button has been added to the Configure New Agent window
• The Status field has been removed from the "api/1.0/discovery/ignorebyfilter" endpoint
• Special characters (()[]#&%! " ') are now allowed in the Scan Policy name field
• Windows and Linux Agent download buttons have been added to the Configure New Agent window
• A Null check has been added for the ImporterType in the Update Scan Profile endpoint

FIXES

• Fixed the Server Error that occured during the deletion of multiple websites
• Fixed a bug where an optimized Scan Policy did not clone properly