New features
This release provides new features and improvements to AppDetectivePRO.- The bundled Scan Engine component is upgraded to v3.25 and includes the following updates:
- Adds support for target x509 certificate validation
- Included Nmap library has been upgraded to the latest available version at time of release
- Scan Engine now supports connecting to target databases using TLS 1.3. This is supported for the latest versions of MariaDB, MongoDB, MSSQL, MySQL, and PostgreSQL. TLS 1.2 remains supported for backwards compatibility purposes.
TLS 1.3 support requires using the latest Windows operating systems (Windows 11 or Windows Server 2022 and greater).
Resolved issues
The following issues were investigated and resolved in this release of AppDetectivePRO v10.14:- The included .NET 8.0 Desktop Runtime has been upgraded to the latest available version to address various vendor-reported vulnerabilities.
Known issues
The following issues remain unresolved in the current release:- When deleting multiple assets with URR results, a CacheMissException error dialog may be shown. If this occurs, it is safe to close the dialog. The assets with URR results will have been deleted properly.
- AppDetectivePRO crashes if the active domain user deletes the Windows group to which the user belongs.
- Connection to MongoDB targets when the “Use FIPS compliant algorithms” security policy is enabled only works using the Certificate Authentication option.
- If the target MySQL server has activated SSL mode, the v6.9.9 or higher of ‘MySQL connector for .Net’ has to be installed on the machine where AppDetectivePRO is installed. Also, the MySQL account used for the policy running should have its
ssl_typeset to beANYwith theREQUIRE SSLclause. - If an audit scan produces a large number of occurrences, AppDetectivePRO performance may degrade. A restart of AppDetectivePRO will restore performance.
- When selecting multiple assets for an audit scan, saved credentials are displayed incorrectly.