Software Enumeration (SSH) inclusion of install dates on RPM based systems

Summary

Tenable products have a Software Enumeration (SSH) plugin (Plugin ID: 22869) that identifies the package list on Linux systems, which includes package name, version, and epoch information for each package installed on the system. By customer request, we have added further details to include the date the operating system reports that a package was installed.

On RPM based systems (RedHat, CentOS, numerous others), it is possible to fetch this data and include it in this plugin's output. We have added this information to our scan results. Analysis was done to determine how feasible adding this data would be. On systems with Debian packaging and several others, it is mostly infeasible due to the design of where that information is stored. 

Change

For all Linux operating systems running RPM based packaging that Tenable products support authentication and analysis, Tenable products will now attempt to store a version of the package list that includes dates separately, and display that output in the "Software Enumeration (SSH)" plugin when it is available.

Plugin:"Software Enumeration (SSH)" (Plugin ID: 22869)

Target Release Date

08 APR 2022