FlagThis

Tenable has disabled Nessus scanner agent versions 10.8.0 and 10.8.1 after a faulty differential plugin update caused agents to go offline. The issue, discovered on December 31st, impacted Nessus agents’ ability to scan for vulnerabilities and collect security data. The affected agents, used to gather information on assets by scanning for vulnerabilities and compliance issues, were rendered inoperable. The company paused updates upon discovery of the problem and identified the cause as being linked to those specific agent versions.

On January 2nd, Tenable announced that the issue was affecting Nessus Agent versions 10.8.0 and 10.8.1 for TVM, TSC and Nessus and the plugin feed updates were disabled, except for TVM Nessus Agent and TVM linked Nessus Scanner. To resolve the problem, Tenable released version 10.8.2 which addresses the problem. Users have been instructed to either upgrade to agent version 10.8.2 or downgrade to version 10.7.3 and reset the plugins to restore functionality. Tenable has not yet provided details on the root cause of the faulty update.

ImgSrc: i.postimg.cc

References:

• Born's Tech and Windows World - Tenable broken plugin update takes Nessus agents offline - 2d
• CISO2CISO.COM & CYBER SECURITY GROUP - Tenable Disables Nessus Agents Over Faulty Updates – Source: www.securityweek.com - 2d
• Security Archives - Security Affairs - Nessus scanner agents went offline due to a faulty plugin update - 2d
• ciso2ciso.com - Tenable Disables Nessus Agents Over Faulty Updates – Source: www.securityweek.com - 2d
• borncity.com - Tenable broken plugin update takes Nessus agents offline - 2d
• ciso2ciso.com - Nessus scanner agents went offline due to a faulty plugin update - 1d
• CISO2CISO.COM & CYBER SECURITY GROUP - Nessus scanner agents went offline due to a faulty plugin update – Source: securityaffairs.com - 1d
• securityboulevard.com - Cyber Heads Up: Tenable Plugin Update Causes Agents to Disconnect from Cloud Console (Read for Fix) - 1d
• Security Boulevard - Cyber Heads Up: Tenable Plugin Update Causes Agents to Disconnect from Cloud Console (Read for Fix) - 1d
• www.assurainc.com - Cyber Heads Up: Tenable Plugin Update Causes Agents to Disconnect from Cloud Console (Read for Fix) - 1d
• SCM feed for Security Strategy, Plan, Budget - Tenable urges manual upgrades to Nessus agent amid outages - 8h

Classification:

• HashTags: Vulnerability Nessus Tenable
• Company: Tenable
• Target: Nessus Agents
• Product: Nessus
• Feature: plugin update
• Type: ProductUpdate
• Severity: Major