New version of Kiuwan, CQM, and Kiuwan Engine 

Main features of this release are:

  1. Kiuwan CQM (v1.2.XX) and Engine
    • Enhanced support for security in VB.NET (78 new security rules)

    • Enhanced support for security in Objective-C (43 new security rules)
    • Further support for NoSQL Injection (added support for Java, PHP, Python and Objective-C)
    • XXXXXXXXXXXXXXXXXXXXX
    • Bug fixing, performance and reliability improvements in rules for Cobol, Abap, RPG, Java, JavaScript, ObjetiveC, JPS, C#, C++ and VB.NET

  2. Kiuwan website
    • New passwords policy

  3. Kiuwan Insights
    • Enhanced readability of Software Licenses Terms
    • Improved analysis performance and components/vulnerabilities detection

 

Kiuwan CQM and Engine

A new version of CQM has been released that incorporate new rules (as detailed below).

CQM is the default Model (i.e. a concrete set of active and pre-configured rules): 

You can find new rules by comparing this release of CQM against previous version.  A detailed description of the behavior of these new rules is available in rule’s description.

 

 

A new version of Kiuwan Engine has been released that incorporates bug fixes, performance and reliability improvements in rules and parsers.

Kiuwan Engine is the  binary code executed when an analysis is run.

 

Unless you have blocked Kiuwan Engine, Kiuwan Local Analyzer will automatically upgrade it to the last version of Kiuwan Engine once a new analysis is run.

 

 

In order for these new rules be applicable, your Kiuwan account must be configured to allow automatic engine upgrade:

New VB.NET security rules

 

New Objective-C security rules

 

Additional support for detection of NoSQL Injection vulnerabilities

Support has been added to Kiuwan to detect NoSQL Injection vulnerabilities.

Additionaly to JavaScript, C# and VB.NET, Kiuwan provides support for Java, PHP, Python and Objective-C.