The vulnerability exists due to insufficient sanitization of user-supplied data within the creation of dashboard tabs. The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks. If you have multiple scanning servers, you can configure which one collects relay data.CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The relay access check may take a minute to complete. If you will be scanning the Linux computer over the internet, enable access to the Lansweeper relay server under Scanning > Cloud Relay Configuration in the Lansweeper web console. If LsAgent cannot send data directly to a Lansweeper scanning server, it will send the data to the relay instead, where the scanning server can collect it. The relay server is hosted in Azure (Microsoft cloud environment) by us.
Specifically, the scanning server must be able to make an outbound connection to port 443 of, our cloud relay server, to retrieve data scanned by LsAgent. If you will be scanning the Linux computer over the internet, make sure outbound traffic is allowed on your Lansweeper scanning server. Make sure your Linux OS is supported as described in this article.To install LsAgent on a Linux computer and subsequently have LsAgent scan the machine, follow these steps: Thanks to the relay server connectivity, LsAgent can even scan computers outside of your network and over the internet. Data is securely sent to the relay server over HTTPS, stored in an encrypted format and deleted once a scanning server has retrieved it. LsAgent sends scanned data back to your Lansweeper installation, either directly or through our relay server in the cloud. It is a cross-platform, lightweight program that you can install on Windows, Linux and Mac computers and that automatically collects an inventory from the computer it's installed on. LsAgent is a scanning agent introduced in Lansweeper 7.0.
Optionally, you can scan your computers with a scanning agent instead. You can scan the Linux, Unix, Mac and Windows computers, VMware servers and other devices in your network without installing any Lansweeper software on the machines you're scanning. Lansweeper includes several agentless scanning methods to scan the assets in your network. You will need to update your installation if you are running a lower Lansweeper version. LsAgent is a feature introduced in Lansweeper 7.0.
0 kommentar(er)
