Question on 2028867

Rule Signatures
1

Hey all. So…java version is 11.0.18. This appears still supported?

What say you?

1 Like
2

Yuuup! Looks like these rules need updated a bit. I’ll get on them today.

Thanks for the nudge, keep 'em coming!

1 Like
3

Brilliant…thank you!

4

So minor correction, 11.0.18 is not the latest version of 11. 11.0.21 is the latest within the 11.0.x branch.

here is a summary of the changes that will be going out today

2025314 - ET POLICY Vulnerable Java Version 9.0.x Detected
    updated for style guide

2011582 - ET POLICY Vulnerable Java Version 1.6.x Detected
    update for style guide
    updated to include all 1.6.x as entire branch is EOL

2025518 - ET POLICY Vulnerable Java Version 10.0.x Detected
	updated for style guide

2028868 - ET POLICY Vulnerable Java Version 12.0.x Detected
	updated for style guide
    updated to include all 12.0.x as entire branch is EOL

2028869 - ET POLICY Vulnerable Java Version 13.0.x Detected
	updated for style guide
    updated to include all 13.0.x as entire branch is EOL

2011584 - ET POLICY Vulnerable Java Version 1.4.x Detected
	updated for style guide

2028867 - ET POLICY Vulnerable Java Version 11.0.x Detected
    updated for style guide
    updated to detect !21 (will still alert on .18)

2034814 - ET POLICY Vulnerable Java Version 14.0.x Detected
    updated for style guide
    updated to include all 14.0.x as entire branch is EOL

2034815 - ET POLICY Vulnerable Java Version 15.0.x Detected
    updated for style guide
    updated to include all 15.0.x as entire branch is EOL

2034816 - ET POLICY Vulnerable Java Version 16.0.x Detected
    updated for style guide
    updated to include all 16.0.x as entire branch is EOL

2011581 - ET POLICY Vulnerable Java Version 1.5.x Detected
	updated for style guide

2014297 - ET POLICY Vulnerable Java Version 1.7.x Detected
	updated for style guide
	updated to include all 1.7.x as entire branch is EOL

2034817 - ET POLICY Vulnerable Java Version 17.0.x Detected
	updated for style guide
	udpate to match on !17.0.9

2038895 - ET POLICY Vulnerable Java Version 18.0.x Detected
	updated for style guide
	updated to include all 18.0.x as entire branch is EOL

2019401 - ET POLICY Vulnerable Java Version 1.8.x Detected
	updated for style guide
	updated to match on !1.8.391

TBD - ET POLICY Vulnerable Java Version 19.0.x Detected
    Added to include all 19.0.x as entire branch is EOL

TBD - ET POLICY Vulnerable Java Version 20.0.x Detected
    Added to include all 20.0.x as entire branch is EOL

TBD - ET POLICY Vulnerable Java Version 21.0.x Detected
    Added to match on !21.0.1
1 Like
5

Found a great resource while looking into these too

I’ll work on pulling this data on a schedule and automating notifications so we can stay more ontop of this!

1 Like
6

Oh nice I will check that out thank you!