Notification

Icon
Error

Firefox 67 Critical Security Issue

Posted: Wednesday, May 22, 2019 8:49:23 AM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,683
3
Like
Hi everyone,

Mozilla released a new Firefox and Firefox ESR version yesterday which also included fixes for a list of vulnerabilities. More information about the vulnerabilities can be found on our blog.
The report below provides an overview of all firefox installations and whether they are on version 67 (or 60.7 for ESR). If they are not, the assets will be highlighted red.

Instructions to run this report can be found here: https://www.lansweeper.c...How-to-run-a-report.aspx

This report will return assets that meet the following criteria:
  • The asset is active.
  • The asset has firefox installed on it
Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblSoftware.softwareVersion Like '67%' And
      tblSoftwareUni.softwareName Like '%firefox%' Then 'Up to date'
    When tblSoftware.softwareVersion Like '60.7%' And
      tblSoftwareUni.softwareName Like '%firefox%ESR%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblSoftware.Lastchanged,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
Case
    When tblSoftware.softwareVersion LIKE '67%' AND tblSoftwareUni.softwareName Like '%firefox%' Then '#d4f4be'
    When tblSoftware.softwareVersion LIKE '60.7%' AND tblSoftwareUni.softwareName Like '%firefox%ESR%' Then '#d4f4be'
    Else '#ffadad'
End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%firefox%' And tblState.Statename =
  'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblMacApplications.Version Like '67%' And
      tblSoftwareUni.softwareName Like '%firefox%' Then 'Up to date'
    When tblMacApplications.Version Like '60.7%' And
      tblSoftwareUni.softwareName Like '%firefox%ESR%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tblSoftwareUni.softwareName As Software,
  tblMacApplications.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblMacOSInfo.SystemVersion As OS,
  tblAssets.SP,
  tblMacApplications.LastChanged,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Case
    When tblMacApplications.Version LIKE '67%' AND tblSoftwareUni.softwareName Like '%firefox%' Then '#d4f4be'
    When tblMacApplications.Version LIKE '60.7%' AND tblSoftwareUni.softwareName Like '%firefox%ESR%' Then '#d4f4be'
    Else '#ffadad'
End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblMacApplications On
    tblAssets.AssetID = tblMacApplications.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblMacApplications.softid
  Inner Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
Where tblSoftwareUni.softwareName Like '%firefox%' And tblState.Statename =
  'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  Case
    When tblLinuxSoftware.Version Like '67%' And tblSoftwareUni.softwareName
      Like '%firefox%' Then 'Up to date'
    When tblLinuxSoftware.Version Like '60.7%' And
      tblSoftwareUni.softwareName Like '%firefox%ESR%' Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tblSoftwareUni.softwareName As Software,
  tblLinuxSoftware.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblLinuxSystem.OSRelease As OS,
  tblAssets.SP,
  tblLinuxSoftware.LastChanged,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
    Case
    When tblLinuxSoftware.Version LIKE '67%' AND tblSoftwareUni.softwareName Like '%firefox%' Then '#d4f4be'
    When tblLinuxSoftware.Version LIKE '60.7%' AND tblSoftwareUni.softwareName Like '%firefox%ESR%' Then '#d4f4be'
    Else '#ffadad'
End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblLinuxSoftware On tblAssets.AssetID = tblLinuxSoftware.AssetID
  Inner Join tblSoftwareUni On
    tblSoftwareUni.SoftID = tblLinuxSoftware.SoftwareUniID
  Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Where tblSoftwareUni.softwareName Like '%firefox%' And tblState.Statename =
  'Active'
Order By Domain,
  AssetName,
  Software
davepusey
#1davepusey Member Posts: 19  
posted: 5/23/2019 11:16:24 AM(UTC)
The colouring doesn't work properly for ESR installations.

Had to change it to...

Code:

Case
    When tblSoftware.softwareVersion LIKE '67%' AND tblSoftwareUni.softwareName Like '%firefox%' Then '#d4f4be'
    When tblSoftware.softwareVersion LIKE '60.7%' AND tblSoftwareUni.softwareName Like '%firefox%ESR%' Then '#d4f4be'
    Else '#ffadad'
End As backgroundcolor
Esben.D
#2Esben.D Member Administration Original PosterPosts: 1,683  
posted: 5/23/2019 11:40:51 AM(UTC)
Originally Posted by: davepusey Go to Quoted Post
The colouring doesn't work properly for ESR installations.

Had to change it to...



Adjusted it in the original report.

Active Discussions

Lansweeper How to modify scan schedule for multiple scanning targets?
by  aturkovich   Go to last post Go to first unread
Last post: Yesterday at 3:46:04 PM(UTC)
Lansweeper Changing/Editing tblComputerSystem.DomainRole
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 2:41:17 PM(UTC)
Lansweeper Version Check Page
by  Esben.D   Go to last post Go to first unread
Last post: Yesterday at 2:37:43 PM(UTC)
Lansweeper warranty information missing
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 2:33:03 PM(UTC)
Lansweeper Dell Switch Servicetag
by  Esben.D   Go to last post Go to first unread
Last post: Yesterday at 2:12:22 PM(UTC)
Lansweeper Office 365 ProPlus not detected in a few PCs
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 2:10:44 PM(UTC)
Lansweeper Imageright Installation
by  CyberCitizen   Go to last post Go to first unread
Last post: Yesterday at 1:01:30 AM(UTC)
Lansweeper Is the conditional step for OS arch broken?
by  CyberCitizen  
Go to last post Go to first unread
Last post: Yesterday at 1:00:54 AM(UTC)