The following enhancements and improvements are now available to Censys ASM and Search customers.
Censys ASM
- See our new Google Security Operations integration in action in this video.
Rapid Response
The Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:
- VMware vCenter Server Vulnerabilities Actively Exploited [CVE-2024-38812, CVE-2024-38813]
- Use the following queries to see all exposed vCenter services. Not all of these are necessarily vulnerable, as specific version information may not be available.
- Censys Search query
- Censys ASM query
- Apache Traffic Server Vulnerabilities [CVE-2024-38479, CVE-2024-50305, CVE-2024-50306]
- Use the following queries to see all exposed Apache Traffic Server services. Not all of these are necessarily vulnerable, as specific version information may not be available.
- Censys Search query
- Censys ASM query
New Fingerprints
Added the following fingerprints:
Type | Name | Description | Query |
risk | Vulnerable Apache Traffic Server [CVE-2024-50306] | This is a service running a version of Apache Traffic Server that is vulnerable to CVE-2024-50306, a privilege escalation on startup vulnerability that may allow attackers to retain elevated privileges during startup. | |
software | Apache Traffic Server | This is an Apache Traffic Server. |