A new Acunetix Premium update has been released for Windows and Linux: 15.4

This Acunetix release improves the default roles. Acunetix offers role-based access control (RBAC) to manage user access efficiently. Thanks to RBAC, you can limit or authorize user access to Acunetix based on the user’s specific role.

• This release brings improvements to user roles. The 15.4 release standardizes the functions in line with industry standards, reducing confusion around role responsibilities.
• The release also introduced new roles, updated existing role names, and expanded role permissions to enhance the user experience.

For further information about the roles, see Overview of users and roles in Acunetix.

New features

• Improved the default roles.

New security checks

• It is updated the WordPress plugin vulnerabilities.
• I updated the software composition analysis database.
• New security check for detection of ASP.NET core in the development mode.
• I added various checks for Content Security Policy misconfiguration.
• New security check for Oracle Web Applications Desktop Integrator unauthenticated takeover. (CVE-2022-21587)
• New security check for Deserialization RCE vulnerability in Oracle Access Manager OpenSSO Agent. (CVE-2021-35587)
• I updated the file extensions and parameter exclusions.
• New security check for F5 BIG-IP Cookie Remote Information Disclosure.
• New security check detecting retired hash functions usage in SAML.
• They improved the SQL injection check to identify whether the database user has admin privileges.

Improvements

• I added the Heuristic server-side routing detection to optimize attacks.
• I updated the embedded Chromium browser to v109.0.5414.119.
• She added the company name field to the registration process for Acunetix.
• The issue tracker integrations are updated to show the link to the relevant ticket created in those issue trackers.
• I updated the DISA STIG report to version 5.2.
• The CSV importing link was improved to limit the target limit to 500.
• It improved the scanner engine to reduce the memory footprint.
• We improved the .NET IAST sensor to mask any password.

Fixes

• I fixed the pagination bug on the Targets page.
• It fixed the crawler issue that the page becomes unresponsive when it contains many elements.
• I fixed the single-page application crawler to be consistent in the form submission.
• It fixed a notification bug that does not redirect users to the correct URL for the finished scan.
• After the update, I fixed the bug that does not refresh the user interface.

Find, fix, and prevent vulnerabilities

Acunetix is an application security testing solution for securing your websites, web applications, and APIs

Get started with Acunetix

Book a live demo with our specialist to discover how Acunetix can quickly find and fix the vulnerabilities that put your web applications at risk of attack.