Enhanced Java Detection on Unix-based OSes

Plugin

64815 - Oracle Java Runtime Environment (JRE) Detection (Unix)

Background

Nessus plugin 64815 detects Java Runtime Environments (JREs) and other Java executable files on Unix-based platforms through several methods including searching the filesystem.

Change

Improvements are being made to the search capabilities of common installation locations to find additional, previously undetected Java installs. The improved search capabilities will execute under the standard scan configuration, without requiring thorough checks to be enabled.

Impact

Customers should expect improved detection of JRE and Java executables, potentially resulting in a significant increase in new vulnerability detections. This improvement may also result in slightly longer scan times and use more system resources on the hosts scanned.

Target Release Date

8 March 2021

Additional Notes

Please note that enabling thorough checks will increase the amount of time the plugin will search for additional Java executables, potentially yielding additional results including vulnerability detections.

Also, a feature was added in December 2020 to allow for directories to be included in the search used by detection plugins including plugin 64815. Customers can make use of this feature to improve detections of Java. See Include specific paths when searching for applications for more information.

----------------------------------------------------------------------------------------------------

Tenable Research Release Highlights are posted in advance of significant new releases or updates to existing plugins or audit files that are important for early customer notification.