Release Notes Comply (Version 2.13)

Tanium Comply 2.13.417

Release Date: September 27, 2022

Fixed an issue with:

assessment actions being recreated and potentially needing to be repeatedly approved.
creating a second vulnerability assessment just after creating another vulnerability assessment.
Findings not properly filtering on an endpoint after clicking details from another Findings row.
improper handling of some endpoints in RAS scans where they appear not to have a MAC address.

You may need to restart the Connect service after updating to this version of Comply.
Connect Findings exports may report null values for some First Found and Last Found dates.

Release Date: September 13, 2022

Tanium™ Connect 4.10.5 or later (To customize columns for exports, you must have Connect 5.8.49 or later)
Tanium™ Discover 3.0 or later required for remote vulnerability reports
Tanium™ Endpoint Configuration 1.2 or later
Endpoint Configuration is installed as part of Tanium™ Client Management 1.7 or later.
Tanium™ Interact 2.12.114 or later
Tanium™ Trends 3.6 or later
Tanium™ Reporting service 1.3.12 or later
Tanium™ API Gateway 1.1.13 or later
Tanium™ Blob service 1.0.6 or later
Tanium™ RDB service 1.0.148 or later
Tanium™ System User service 1.0.77 or later

Additional Remote Authenticated Scanning requirements:

This release includes:

Support for CVSS v3.1 scores and severities. Existing vulnerability assessments can be converted to be based on CVSS v3.1 scores.
The option to add arbitrary additional fields to Comply Findings exports in Connect.
The ability to sort assessments by "Status" in the Assessments page.
A new column, "Last Modified By," in the Assessments page.
Support for Red Hat Linux 9 assessments.
Support for Ubuntu 22 assessments.
The ability to filter assessments by Assessment Hash in the Assessments page.
A list of associated assessments to the Custom Profiles, Custom Checks, Custom ID Mappings, and Custom ID configuration pages.
Computer ID as a column in the Findings pages.
A new sensor, "Comply - CVE Findings - Absolute First Found."
Deprecated sensors are no longer hidden.
Standardizing default date export format as YYYY-MM-DD.
A clearer message when the license expires.

Fixed an issue:

with custom profiles showing Unknown title if all checks aren't in benchmark.
with "Download as CSV" filenames not properly handling some characters.
with rounding up compliance percentages.
with getting 504 errors when exporting via "Download as CSV."
with world-writable files in Linux JRE downloads.
with not properly deleting data when removing stale compliance assessments.
with assessments not properly retrying when they exit with a failure.
with long-running, low-resource-mode scans preventing other scans from running.
with the Remote Open Ports checkbox appearing on Create Vulnerability Assessment pages.

Clicking on Findings grid values to filter by endpoint doesn't properly filter by that endpoint.
You may need to restart the Connect service after updating to this version of Comply.
Connect Findings exports may report null values for some First Found and Last Found dates.