VMWare vCenter Integrations Change In Reporting

Summary

Tenable will be changing how authentication is reported for VMware vCenter Integrations in an upcoming release. The VMWare Security Advisories do not require authentication and will be correctly reported for the VMWare vCenter Integration.

The first change will be to remove authentication reporting from plugins 122502 and 122503 “Integration Credential Status” for plugin 63062 the VMware vCenter Data collector that uses the REST API to collect data. The integration will now report its own authentication issues.

Tenable will not be changing reporting for 180178, the VMware vCenter Legacy Data collector that uses the SOAP API to collect data. This will continue to report authentication failures due to the legacy method for vulnerability data being used from the integration’s VIB data.

These changes are to help improve the clarity and overall reporting of the authentication status for the VMWare vCenter Integrations. As failed authentication does not mean that VMWare Security Advisories will be missing and has caused misleading issues for end users of the integration.

Impacted Plugins

• 180178 : VMware vCenter Legacy Data Collection
• 63062 : VMware vCenter Data Collection
• 122502 : Integration Credential Status by Authentication Protocol - Valid Credentials Provided
• 122503 : Integration Credential Status by Authentication Protocol - Failure for Provided Credentials

Impacted Tenable.sc Dashboard Components

• Authentication Summary - Authentication Plugin Indicator
• Operations - Hosts with Vulnerability Scanning Issues

Impacted Tenable.sc Dynamic Assets

• Hosts with Successful Patch Management Authentication
• Hosts with Failed Patch Management Authentication

Impacted Tenable.io Vulnerability Management Content

• 122503
  • widgets - Scan Troubleshooting Plugins (Explore)
  • widgets - Scan Authentication Summary (Explore)
• 122502
  • widgets - Scan Information Plugins (Explore)
• 63062
  • widgets - Authentication Searches (Explore)
  • widgets - Scan Information Plugins (Explore)
• 180178
  • Currently not used in any content

Target Release Date

Monday September 11, 2023