Version 3.1.0

[FEATURE] Scan: Option to exclude ABAP clients

[FEATURE] Check metadata: CVSS V2 is converted to CVSS V3

[FEATURE] Check template: New PCI-DSS V3.2

[FEATURE] Check: New security notes checks

[FEATURE] Check: New CO-LP-0050-01: SSO ticket: login/ticket_only_to_host

[FEATURE] Check: New CO-LP-0052-01: SSO ticket: login/ticket_only_by_https

[FEATURE] Check: New AT-AA-0068-01: Users authorized to maintain tables

[FEATURE] Check: New AT-AA-0069-01: Users authorized to change client settings SCC4

[FEATURE] Check: New AT-AA-0070-01: Users authorized to change other users

[FEATURE] Check: New AT-AA-0071-01: Users authorized to run ABAP programs

[FEATURE] Check: New AT-AA-0072-01: Users authorized to debug

[FEATURE] Check: New AT-AA-0073-01: Users authorized to transport changes into a system

[FIX] Check: Changed implementation for check PM-DB-0003-01 to solve read errors

[FIX] Check: Changed implementation for check IN-SC-0006-01

[FIX] Check: Changed implementation for check AU-DU-0001-01 to ignore locked users

[FIX] Authorization: The role /ESEC/SA_SATELLITE has been improved

[FIX] Authorization: The role /ESEC/SA_SCAN_EXPORT has been improved

[FIX] Authorization: The role /ESEC/SA_ADMINISTRATOR has been improved

[FIX] Check: Changed implementation of the checks that are using program RSUSR002

[FIX] System: The created user in the satellite system is now of type System

Last updated