ITarian Help

Find the desired product help

SOCaaP

SOCaaP

Version 2.2

English

Print Help
SOCaaP Web Protection > Website Data And Settings > Security Scans > Vulnerability Scans > CMS Vulnerability Scans
  • Introduction
    • Logging-in To The SOCaaP Console
  • Dashboard Overview
    • Summary
    • Alerts, Incidents And Website Vulnerabilities
    • Customer Health
  • SOCaaP Alerts/Escalations
    • Log-in To The Admin Console
    • The Home Screen
    • Service Summary
    • Incidents Overview
      • Incidents
      • Threat Summary
    • Log Collection Summary
    • Threat Communication Graph
    • Tickets
    • Reports
    • Notification Settings
    • Integrate Your Office 365 Account With SOCaaP
  • SOCaaP SIEM
    • Log-in To The Admin Console
    • The Main Interface
    • The Dashboard
    • Customer Asset Management
      • Add Customers
      • Add Assets For Monitoring
        • Hard Assets
        • Soft Assets
      • Configure Nxlog And Rsyslog To Send Logs To SOCaaP Server
      • Edit Customers
    • Query Management
      • Configure Event Queries
      • Long Term Analysis
      • Configure Custom Dashboards
      • Event Field Selection Settings
    • Manage Rules
      • Manage Correlation Rules
      • Manage Tagged Rules
      • Manage Aggregation Rules
    • Incidents
      • Manage Incidents
      • Incident Category Management
      • Category Action Management
    • Lists
      • Manage Live Lists
      • Manage Live List Content
      • Manage Range List Content
      • Manage IP Range List Content
      • Manage Multiple Column List Content
    • Manage Reports
    • Administration
      • Event Collection
      • Phantom Settings
      • Manage Users
    • Appendix 1 – Field Groups And Event Items Description
    • Appendix 2 – SOCaaP Supported Logs
  • SOCaaP Web Protection
    • Add Websites
    • The Main Interface
    • The Dashboard
    • Website Data And Settings
      • Website Overview
      • Security Scans
        • Website Scans
        • Website Files Security Scans
          • Malware Scan Settings
            • Automatic Configuration
            • Manual Configuration
          • Run A Scan And View Results
          • Notifications, Malware Removal And Scheduled Scans
        • Vulnerability Scans
          • CMS Vulnerability Scans
          • OWASP Top 10 Vulnerability Scans
      • Content Delivery Network
        • Activate CDN For A Website
        • CDN Settings
        • View CDN Metrics
      • Firewall
        • WAF Statistics
        • WAF Events
        • Configure WAF Policies
        • Manage Custom Firewall Rules
      • SSL Configuration
      • DNS Configuration
      • Add Trust Seal To Your Websites
      • Back Up Your Website
        • Backup Settings
        • On-Demand Backup
        • View Backup Records And File Statistics
        • Restore And Download Website Files
        • Delete Backups
    • Manage Your Profile
  • Sensor Installation
    • Requirements
    • (Option 1) Create Installation Media
    • (Option 2) Deploy Virtual Machine Environment
      • Create A New Virtual Machine
      • Configure Memory Size
      • Configure Hard Disk
      • View VM Summary
      • Configure Network Settings
      • Select VM Startup Disk
    • Sensor Installation Steps
    • Sensor Configuration Steps
      • Login To The Web Portal
      • User Settings
      • Configure Network
      • Configure Timezone
      • Key Activation
      • (Optional) Valkyrie Key Verdict
      • (Optional) Forward Log
  • Frequently Asked Questions
  • About ITarian Security Solutions

CMS Vulnerability Scans


  • Select a website from the drop-down at top-left
  • Click 'Scan' > 'Vulnerability Scan’

The content management system (CMS) scanner inspects your core site, plugins and themes to identify vulnerabilities in your current version.


The scanner supports the following types of CMS:

  • WordPress
  • Joomla
  • Drupal
  • ModX
  • Typo3

See the following for more help:


  • The scan interface
  • Run an on-demand scan
  • View detailed results of the last scan
  • View the results of previous scans

The scan interface


  • Open the SOCaaP Web Protection dashboard
  • Select the target website from the menu at top-left
  • Click the 'Scan' tab then 'Vulnerability Scan’




The last scan area on the right shows the results of the most recent scan.


  • Scan Date - When the most recent discovery was run.
  • Version - The version number of the CMS that was scanned. This is the CMS version that your site runs on.
  • Status - Whether the website has vulnerabilities or not.
  • Not Vulnerable - No weaknesses detected.
  • Vulnerable - Security threats found. Click on the row to view more details and fix advice.
  • Failed - Scan did not run for some reason.
  • CMS format not identified - Shown if the site doesn't use a supported CMS, or because SOCaaP Web Protection couldn't detect the CMS type for other reasons.
  • Click the 'Refresh' icon at top-right to reload the results of the latest scan.
The pane lets you:

  • Run an on-demand scan
  • View detailed results of the last scan
  • View the results of previous scans

Start an on-demand CMS scan


You can manually start a CMS scan at anytime:


  • Open the SOCaaP Web Protection dashboard
  • Select the target website from the menu at top-left
  • Click the 'Scan' tab then 'Vulnerability Scan’




  • SOCaaP Web Protection will begin scanning the domain for CMS vulnerabilities
  • Scan results are shown in the 'Last Scan' box on the right
  • Click the 'Refresh' icon at top-right to reload the results of the scan
  • Alerts will be generated if any vulnerabilities are found.
  • Click 'View Full Report' for a comprehensive overview of discovered vulnerabilities
  • See View detailed results of the last scan for more details

View detailed results


  • Select the target website from the menu at top-left
  • Click the 'Scan' tab then 'Vulnerability'
  • Click 'View Full Report' under 'Last Scan' in the CMS scan pane as shown below:




Vulnerability information is available for the following CMS components:


  • Core
  • Plugins
  • Theme
  • Select a tab to view a list of vulnerabilities in the component
  • Click the '+' icon at the left of an item to view its details:




CMS Vulnerabilities - Column Descriptions

Column Header

Description

Vulnerability

A short description of the weakness.

Patch Fix

The version of the CMS in which the vulnerability was fixed. Update your CMS to this version to remove the vulnerability from your site.

Reference

Links to detailed information about the vulnerability and guidance to fix the issue.

  • Click 'See More' to view a list of reference pages

Found in

The version of the CMS in which the vulnerability was discovered.

  • Click 'See More' to view a list of versions in which the vulnerability is found

Latest Version

The most recent version of the CMS available. We advise customers to upgrade to the latest version if possible.


View results of previous scans


You can view the results of the 10 most recent CMS scans on your site.


  • Select the target website from the menu at top-left
  • Click the 'Scan' tab then 'Vulnerability'
  • Click 'View Scan History' in the 'CMS Scan' pane




The dates of the previous scans are shown at the top of the history window.


  • Select a date to view detailed results from the scan run on that day

See View detailed results of the last scan if you need more help with this.

Comodo Help
  • IT Platform:
  • Help
  • Scripts
  • Wiki
  • Forum
  • Developer
  • RMM
  • Patch Management
  • Service Desk
  • ITSM
  • Managed Service Provider
  • Managed Detection and Response
  • Ticketing System
  • Helpdesk
  • ITIL

Copyright 2024 Itarian