RMMZit 0.9.0 — vulnerabilities, blocked programs and custom fields.
New
- Vulnerabilities: the installed programs of all devices are compared every 6 hours with public vulnerability databases — NVD for common Windows programs (browsers, PDF readers, archivers, remote access and development tools and others; version ranges are checked by the server) and OSV for the packages of Debian and Ubuntu. Only program names and versions leave the server, never device data. It is off until an administrator switches it on under Vulnerabilities; an optional free NVD API key makes the first scan faster. The page lists the affected programs and versions by severity with their devices, and every device has a Vulnerabilities tab with links to the descriptions. A policy's alert rules can open an alert for critical ones (CVSS 9 or more). Vulnerabilities of Debian and Ubuntu packages without a fix in their release yet are hidden unless you show them; each finding shows the version that fixes it.
- Blocked programs (in the policy's required software): programs the devices must not have, found by a part of their installed name. They open an alert; with Alert and remove the server also uninstalls them silently (again after 6 hours while they are still there). The device's Policy tab shows what was found.
- Custom fields: administrators define their own fields for devices and customers (text, number or date — asset number, warranty end, contract) under Settings → Custom fields; technicians fill them in on the device and customer pages. The API returns the device fields with each device and sets them with
PUT /api/v1/devices/{id}/fields.
Updating
Settings → RMMZit updates installs 0.9.0 from GitHub. Agents update themselves (Settings → Agent updates); vulnerability matching of Debian packages works best with agents 0.9.0 (they report source packages).
