Upcoming Release: CyberArk User Interface Improvements

Summary

Tenable is proud to announce new usability and flexibility improvements to the CyberArk Privileged Access Management (PAM) integration.

The first improvement is to add a fourth option to the “Get Credential By” drop-down menu. Currently “Get Credential By” supports the following options: Username, Address and Identifier. Now users will have the   “Parameters” option available for use, adding the ability to specify advanced query parameters for credential objects. This provides additional flexibility in how users choose to fetch target credentials from CyberArk, instead of being limited to fetching the credential “by username”, “by address”, or “by identifier”.

With the “Parameters” option, the following request parameters will be available, and can be specified in any combination:

• Safe
• Username
• Address
• Use Target Address (checkbox)
• Account Name (identifier)
• Folder
• Database
• Query
• Query Format

For additional information on query parameters, see Tenable documentation or the CyberArk credential provider documentation.

The second improvement is to add a drop-down menu for privilege escalation similar to the “Get Credential By” drop-down menu, called “Get Escalation Credential By”. This eliminates the need to specify a specific escalation credential identifier, as this often leads to usability issues.  The new “Parameters” option will also be available for this new drop-down menu.

Note: As a part of this, the “Escalation Account Name” field will no longer be required.

Scope

This will affect the CyberArk authentication method in Windows and SSH Host credentials, as well as Database credentials and the VMware vCenter API credential. It does not affect the CyberArk Auto-Discovery authentication method or the CyberArk (Legacy) method.

Impact

There is no action required for existing scans, which will continue to use their existing preferences. The new features are optional.

Release Date

Oct 14, 2024 for Nessus and TVM

TBD for SC