Genian NAC 5.0.54 Release Notes (2023-04-12)
Last Updated: 2023-07-20
Security Vulnerability
| Revision | Key | Components | Description | Affects Versions | CVSS Score |
|---|---|---|---|---|---|
| 114720 | GN-26368 | WebUI | Vulnerability where an administrator's API key is exposed to other administrators | 5.3 | |
| 114214 | GN-26392 | WebUI | Vulnerability that allows unprivileged administrators to download debug logs | 2.9 | |
| 113419 | GN-26391 | WebUI | Vulnerability where an unauthorized administrator can view debug logs in real time | 5.0.0, 6.0.0 | 2.9 |
| 113219 | GN-26460 | Windows Agent | A vulnerability that allows an ordinary user to obtain PC administrator rights via an agent | 5.0.0, 6.0.0 | 4.6 |
New Features and Improvements
| Revision | Key | Components | Description | Affects Versions |
|---|---|---|---|---|
| 117757 | GN-26702 | WebUI | A function that outputs a warning when external access is permitted from the policy server | |
| 117448 | GN-26769 | Linux Agent | Linux Agent, development of distribution plug-ins based on Sigstore electronic signatures | |
| 116767 | GN-26826 | geniup | A problem where a disk runs out when performing geniup on a UEFI system | |
| 116532 | GN-26705 | Center | Electronic signature verification of update server distribution data via SLSA | |
| 116395 | GN-26844 | Center, Sensor | Display whether the sensor can be accessed externally in sensor information (public IP) | |
| 115885 | GN-26786 | Center | Electronic signature verification for WSUSSCN2.CAB received from the update server | |
| 114255 | GN-26328 | WebUI | Improved to include node group names when downloading node groups in Excel | |
| 114197 | GN-26568 | WebUI | Improved so that the node group conditions can be entered directly when setting the software name include/not included | |
| 112796 | GN-26148 | Center | Improved so that when the agent logs on, node information can be updated immediately if it is determined that the device is different from the existing node |
Issues Fixed
| Revision | Key | Components | Description | Affects Versions |
|---|---|---|---|---|
| 117427 | GN-26213 | WebUI | An issue where an option value that does not change when assigning a node group after creating a node policy appears to have changed | 5.0.44 |
| 117233 | GN-26852 | Center, Genian Syncer | An issue where Mobilebrowser data cannot be updated when uploading Genie data via Syncer, and an issue where CVE data versions cannot be updated | 4.1.0 |
| 117182 | GN-26770 | Center, Sensor | [General-purpose OS] A problem where the sensor does not work as a distribution server | 5.0.29 |
| 117122 | GN-26773 | WebUI | An issue where node group conditions do not work in the node list query API | 5.0.54, 6.0.14 |
| 116853 | GN-26839 | Center, Sensor | Policy Server/Sensor Memory Rick (Genie Update and Node Scan (https)) issues | 4.0.14 |
| 116696 | GN-26768 | WebUI | Node addition field - error not reflecting user selector setting options | 5.0.22 |
| 116625 | GN-26816 | WebUI | An error where the output is broken if the nodegroup's CWP message has a tag | 5.0.37 |
| 116616 | GN-26779 | WebUI | A problem where a warning message is output even when the log server (elasticsearch) is in a normal state | 5.0.23 |
| 116581 | GN-26758 | Windows Agent | If the agent runs on a local system, the Store app fails to be deleted through the program removal plug-in | 5.0.42, 6.0.0 |
| 116343 | GN-26623 | WebUI | A problem where the IP expiration time is not displayed when exporting to Excel when the node management view is an IP management view | 5.0.50 |
| 115785 | GN-26749 | ElasticSearch | [General-purpose OS] An issue where ES does not run properly intermittently because communication with Elastic is blocked by the Iptables policy | 5.0.31 |
| 115639 | GN-26727 | Sensor | [General-purpose OS] A problem where a DHCP server that assigns the same DNS as the sensor is detected as an abnormal DHCP server | |
| 115611 | GN-26706 | WebUI | Modify the search popup to work when the 'Add Node Field - User Selector' option does not allow text entry | 5.0.22 |
| 115493 | GN-25887 | WebUI | Subcategories are not displayed in the multi-level category structure within the status filter node group | 5.0.42, 5.0.45, 6.0.2 |
| 115300 | GN-26601 | WebUI | An issue where unused IPs cannot be selected in the matrix view when the administrator's management scope is set to a sensor group | 4.0.117, 5.0.14 |
| 115289 | GN-26719 | WebUI | An issue where when creating a time object from the Policy > Object > Time menu causes the date to be stored incorrectly if the System Timezone and Administrator Timezone are different | 5.0.34 |
| 115122 | GN-26428 | Center | A problem that may fail depending on the OS type when upgrading the deb image through the console UI | 5.0.42, 6.0.12 |
| 115109 | GN-26571 | Enforcer | An issue where the blocking node appears to be communicating due to a SYN-ACK response from the sensor even when CWP is disabled | 5.0.0 |
| 115022 | GN-26607 | GenianOS | The problem of not being able to connect to the Genian Monitor program from the IP that allows access to the management WEBUI | 5.0.42, 5.0.50, 5.0.53, 6.0.13 |
| 114881 | GN-26654 | macOS Agent | macOS screensaver settings are not enforced when users manually change them | 5.0.45, 6.0.2 |
| 114824 | GN-26647 | WebUI | Fixed an issue where Disk column content was not displayed on the system management screen | 5.0.23 |
| 114668 | GN-25626 | WebUI | An issue where regular users are searched even when the visitor's email approval target is an administrator | 4.0.M8 |
| 114614 | GN-26629 | WebUI | A problem where the node management screen is moved through a quick search, and when performing a batch task after selecting all nodes, a message that no nodes have been selected is displayed | 4.0.114, 5.0.11 |
| 114534 | GN-26620 | Enforcer |
|
4.0.17 |
| 114312 | GN-26597 | WebUI | A problem where query reports are not generated when the DB/Log server is separated | 5.0.37 |
| 114265 | GN-26609 | WebUI | An error occurs when registering a node using the node addition field (user selector-mapping column name) | 5.0.42, 5.0.50, 6.0.11 |
| 114241 | GN-26430 | WebUI | A problem where the department tree of the device usage application form does not appear in a cloud environment | 5.0.52, 6.0.13 |
| 114197 | GN-26465 | WebUI | An issue where existing settings are not selected as default values when modifying agent actions in node group conditions | 5.0.45 |
| 114197 | GN-26440 | WebUI | There is no change in the tag, but the node details are also updated and processed when the node details are modified | 5.0.22, 6.0.4 |
| 114197 | GN-26425 | WebUI | A problem where the data does not include the parent department when selecting the user department in the node group condition | 5.0.35 |
| 114153 | GN-26280 | Center | A problem where a multi-sensor device is registered in an approved state when re-registered after deleting it | 6.0.8, 5.0.50 |
| 114066 | GN-26566 | WebUI | An issue where the changed information was updated and not displayed when the tab was moved after updating the node information | 5.0.50 |
| 113986 | GN-26476 | WebUI | Correction of errors on the execution results status page for each action | 5.0.50 |
| 113972 | GN-26587 | WebUI | Fixed an issue where the content in the node management department name column was not displayed properly | 6.0.5, 5.0.50 |
| 113970 | GN-26299 | Center | Authentication acceptance issue even if the domain is different from the user domain associated with authentication | 5.0.53 |
| 113961 | GN-26272 | Center | SMTP authentication integration - Abnormal user authentication issue when using [account] @ [domain] ID format | 5.0.53 |
| 113769 | GN-25776 | Center | Improved so that password change expiration notifications are not displayed for users without a password and synchronized users (READ ONLY) | 4.0.18 |
| 113732 | GN-26549 | Sensor | Intermittent dnsmasq daemon restart symptoms | 6.0.12, 5.0.53 |
| 113655 | GN-26554 | Sensor | Too many open file errors occur in Ubuntu NAC Center/Sensor Equipment and the sensor status goes down | 5.0.51, 6.0.11 |
| 113556 | GN-26448 | WebUI | An error where policy server information is not output from the system list after installing the Compose method | 5.0.6 |
| 113541 | GN-26540 | Windows Agent | Windows 11 is incorrectly displayed as Windows 10 when selecting the plug-in 'Applicable OS' in the English management console. | 5.0.42, 6.0.0 |
| 113486 | GN-26267 | WebUI | An issue where today's audit log is not output from Audit > Logs before 9:00 KST | 4.0.17 |
| 113400 | GN-26357 | WebUI | A problem where the old version of the detailed screen is displayed when returning to the basic status from the target node list on the new node group detail screen | 5.0.35 |
| 113373 | GN-26518 | Center | An issue where information collected by the agent (updateinfo) may be deleted | 5.0.52, 6.0.13 |
| 113357 | GN-26322 | macOS Agent | An issue where CPU usage increases when receiving macOS notification messages | 5.0.27 |
| 113343 | GN-26446 | Center | An issue where the center daemon's fd increases when the LDAP connection fails | 5.0.41, 4.0.145, 6.0.0 |
| 113322 | GN-26444 | WebUI | Symptoms of not being able to search for Hangul in the software settings window under node group conditions | 5.0.35 |
| 113315 | GN-26496 | CLOUD | An issue where log statistics data is not displayed when a cloud site is first created | 5.0.50, 6.0.12 |
| 113149 | GN-26296 | Windows Agent | A problem where other action policies malfunction when there are a large number of USB exception policies in the device control policy | 5.0.0, 6.0.0 |
| 113129 | GN-26353 | Authsync | An issue where a fixed value is not set when syncing Google G Suite information | |
| 113044 | GN-26414 | Windows Agent | A problem where the fixed option in the password verification window is periodically placed in the center of the screen even when the fixed option is off | 5.0.42, 6.0.12, 5.0.53 |
| 113024 | GN-26433 | Sensor | An issue where sensor communication may not be possible due to an incorrect IP rule being created when adding a gateway IP | 5.0.42 |
| 112796 | GN-26655 | WebUI | An error page occurred when exporting node management to Excel in the Compose version | 5.0.48, 6.0.6 |
| 112796 | GN-26119 | Windows Agent | A problem where APs allowed to connect are blocked due to capitalization comparison errors in wireless LAN control | 4.0.0, 5.0.0, 6.0.0 |
| 112796 | GN-26118 | Windows Agent | An issue where some printers are excluded when virtual printer collection exclusion is set in printer information collection | 4.0.0, 5.0.0, 6.0.0 |
| 112674 | GN-26259 | ElasticSearch | Error displaying shard information in the Elasticsearch management tool on the Advance page | 5.0.17 |