{"id":19409,"date":"2023-07-14T08:59:51","date_gmt":"2023-07-14T12:59:51","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19409"},"modified":"2023-07-14T08:59:51","modified_gmt":"2023-07-14T12:59:51","slug":"security-odbc-vuln-175441","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/","title":{"rendered":"Security &#8211; ODBC Vuln 175441"},"content":{"rendered":"<p>Security &#8211; ODBC Vuln 175441<\/p>\n<figure id=\"attachment_19410\" aria-describedby=\"caption-attachment-19410\" style=\"width: 1024px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19410\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg\" alt=\"Time to make the donuts!\" width=\"1024\" height=\"768\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg 1024w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts-300x225.jpg 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts-768x576.jpg 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19410\" class=\"wp-caption-text\">Time to make the donuts!<\/figcaption><\/figure>\n<p>Time to make the doughnuts again, new Security ODBC Vuln 175441 that needs to be mitigated.\u00a0 Not sure if you ever saw the commercials, but this is where my mind goes sarcastic humor and all.\u00a0 Whether you&#8217;re using ACAS\/Tenable\/Nessus for security scans, this may show up with your SCOM servers (MS, DB), and PowerBI Report Servers.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h1><strong>Let&#8217;s get started to upgrade ODBC<\/strong><\/h1>\n<p>Action:\u00a0 <span style=\"font-size: 1rem;\">Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.<\/span><\/p>\n<p>Start with some documentation, to understand what and why&#8230;<\/p>\n<p style=\"padding-left: 40px;\">Tenable\/Nessus <a href=\"https:\/\/www.tenable.com\/plugins\/nessus\/175441\" target=\"_blank\" rel=\"noopener\">Link<\/a> to vulnerability<\/p>\n<p style=\"padding-left: 40px;\">Download ODBC v18 <a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239549\" target=\"_blank\" rel=\"noopener\">here<\/a>, v17 <a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239168\" target=\"_blank\" rel=\"noopener\">here<\/a><\/p>\n<h2><\/h2>\n<h2><strong>Outline of mitigation steps<\/strong><\/h2>\n<p>What servers are vulnerable<\/p>\n<p>Mitigate vulnerability on affected servers<\/p>\n<p>Verify server Control Panel shows update<\/p>\n<p>Have Security run additional scan to verify resolved<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h1><strong>What servers are vulnerable?<\/strong><\/h1>\n<p>We&#8217;re focused on the &#8216;Security &#8211; ODBC Vuln 175441&#8217;<\/p>\n<p>&nbsp;<\/p>\n<p>Begin by looking at your Security scanning tool output (PowerBI report pictured).\u00a0 I am also showcasing the PowerBI report, as this streamlines what the Security Admin has to provide when System Administrators (sysAdmin) reach out for debug\/details.<\/p>\n<figure id=\"attachment_19411\" aria-describedby=\"caption-attachment-19411\" style=\"width: 1373px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19411\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns.png\" alt=\"ACAS\/Tenable\/Nessus scan PowerBI Report\" width=\"1373\" height=\"970\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns.png 1373w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns-300x212.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns-1024x723.png 1024w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ACASPowerBIReportSCOMVulns-768x543.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19411\" class=\"wp-caption-text\">ACAS\/Tenable\/Nessus scan PowerBI Report<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>In my case, I wanted to see what servers are impacted.\u00a0 The PowerBI Report has a built-in &#8216;Deep Dive&#8217; tab to see the details from the scan\/check.\u00a0 Click on the Deep Dive Tab, enter the PlugIn ID (175441 for ODBC) and hit enter.\u00a0 This breaks out what servers are vulnerable.\u00a0 \u00a0Assess what servers are yours (my output simplified to show what I own with SCOM and PowerBI \ud83d\ude42\u00a0 Looking at the &#8216;NetBIOS Name&#8217; column.\u00a0 Alternatively, the admin typically has the scan tool email XLS files.<\/p>\n<figure id=\"attachment_19412\" aria-describedby=\"caption-attachment-19412\" style=\"width: 864px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerBIDeepDiveTab.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-19412 size-full\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerBIDeepDiveTab.png\" alt=\"Access your ACAS\/Tenable\/Nessus scan deep dive tab (or PowerBI Report) to see how many systems are vulnerable.\" width=\"864\" height=\"141\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerBIDeepDiveTab.png 864w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerBIDeepDiveTab-300x49.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerBIDeepDiveTab-768x125.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19412\" class=\"wp-caption-text\">Access your ACAS\/Tenable\/Nessus scan deep dive tab (or PowerBI Report) to see how many systems are vulnerable.<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h1><strong>Mitigate vulnerability on affected servers<\/strong><\/h1>\n<p><a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239549\" target=\"_blank\" rel=\"noopener\">Download ODBC v18 <\/a><a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239549\" target=\"_blank\" rel=\"noopener\">here<\/a><a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239549\" target=\"_blank\" rel=\"noopener\">, v17 <\/a><a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239168\" target=\"_blank\" rel=\"noopener\">here<\/a><\/p>\n<p>Save to share or common path to put file on affected server(s).<\/p>\n<p>Once moved, login to affected server(s), typically RDP with Local Administrator equivalent admin ID<\/p>\n<p>Open Windows Explorer &gt; Copy ODBC MSI to server<\/p>\n<p>Open PowerShell (as Admin) window &gt;\u00a0Go to path &gt; Run ODBCMSI<\/p>\n<figure id=\"attachment_19413\" aria-describedby=\"caption-attachment-19413\" style=\"width: 843px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerShellAsAdmin.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19413\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerShellAsAdmin.png\" alt=\"PowerShell as Administrator steps\" width=\"843\" height=\"478\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerShellAsAdmin.png 843w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerShellAsAdmin-300x170.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/PowerShellAsAdmin-768x435.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19413\" class=\"wp-caption-text\">PowerShell as Administrator steps<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Now the ODBC popup window for install<\/strong><\/p>\n<p><span style=\"color: #ff0000;\">Note the screenshots and progress prompts<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Click &#8216;I accept&#8217; radio button and then click &#8216;Next&#8217;<\/p>\n<figure id=\"attachment_19415\" aria-describedby=\"caption-attachment-19415\" style=\"width: 501px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18EULA.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19415\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18EULA.png\" alt=\"ODBC EULA splash screen\" width=\"501\" height=\"383\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18EULA.png 501w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18EULA-300x229.png 300w\" sizes=\"auto, (max-width: 501px) 85vw, 501px\" \/><\/a><figcaption id=\"caption-attachment-19415\" class=\"wp-caption-text\">ODBC EULA splash screen<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Click Next to move beyond the ODBC features screen<\/p>\n<figure id=\"attachment_19416\" aria-describedby=\"caption-attachment-19416\" style=\"width: 498px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Features.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19416\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Features.png\" alt=\"ODBC Features screen\" width=\"498\" height=\"397\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Features.png 498w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Features-300x239.png 300w\" sizes=\"auto, (max-width: 498px) 85vw, 498px\" \/><\/a><figcaption id=\"caption-attachment-19416\" class=\"wp-caption-text\">ODBC Features screen<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Click on Install<\/p>\n<figure id=\"attachment_19417\" aria-describedby=\"caption-attachment-19417\" style=\"width: 499px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Install.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19417\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Install.png\" alt=\"ODBC Install prompt\" width=\"499\" height=\"382\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Install.png 499w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-Install-300x230.png 300w\" sizes=\"auto, (max-width: 499px) 85vw, 499px\" \/><\/a><figcaption id=\"caption-attachment-19417\" class=\"wp-caption-text\">ODBC Install prompt<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Watch progress bar\u00a0 (maybe 1-2 minutes)<\/p>\n<figure id=\"attachment_19418\" aria-describedby=\"caption-attachment-19418\" style=\"width: 498px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallProgress.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19418\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallProgress.png\" alt=\"ODBC Install Progress bar\" width=\"498\" height=\"380\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallProgress.png 498w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallProgress-300x229.png 300w\" sizes=\"auto, (max-width: 498px) 85vw, 498px\" \/><\/a><figcaption id=\"caption-attachment-19418\" class=\"wp-caption-text\">ODBC Install Progress bar<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Click Finished<\/p>\n<figure id=\"attachment_19419\" aria-describedby=\"caption-attachment-19419\" style=\"width: 498px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallCompleted.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19419\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallCompleted.png\" alt=\"ODBC Install finished\" width=\"498\" height=\"380\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallCompleted.png 498w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-InstallCompleted-300x229.png 300w\" sizes=\"auto, (max-width: 498px) 85vw, 498px\" \/><\/a><figcaption id=\"caption-attachment-19419\" class=\"wp-caption-text\">ODBC Install finished<\/figcaption><\/figure>\n<p>Once the MSI installer window closes, it&#8217;s time to verify server Control Panel.<\/p>\n<p>&nbsp;<\/p>\n<h1><\/h1>\n<h1><strong>Verify server Control Panel shows update<\/strong><\/h1>\n<p>Click on Start &gt; Control Panel &gt; Programs &gt; Programs and Features<\/p>\n<p>In the top right search bar, type &#8216;ODBC&#8217; and hit enter to filter results.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Snapshot of Control Panel before<\/strong><\/p>\n<figure id=\"attachment_19421\" aria-describedby=\"caption-attachment-19421\" style=\"width: 1165px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19421\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore.png\" alt=\"Control Panel with ODBC as the search string\" width=\"1165\" height=\"497\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore.png 1165w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore-300x128.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore-1024x437.png 1024w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelBefore-768x328.png 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19421\" class=\"wp-caption-text\">Control Panel with ODBC as the search string<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p><strong>Snapshot of Control Panel after<\/strong><\/p>\n<p>Hit F5 to refresh screen output<\/p>\n<figure id=\"attachment_19422\" aria-describedby=\"caption-attachment-19422\" style=\"width: 982px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19422\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter.png\" alt=\"ODBC Control Panel after install\" width=\"982\" height=\"281\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter.png 982w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter-300x86.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter-768x220.png 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/ODBC18-ControlPanelAfter-350x100.png 350w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-19422\" class=\"wp-caption-text\">ODBC Control Panel after install<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>The one question is if version 17 has to be removed to clear vulnerability.\u00a0 Ran into this scenario with Java, as the update left old versions.<\/p>\n<p>I typically reboot the server to reinitialize server to assess any impacts, as well as boot on the new drivers.\u00a0 \u00a0For this instance, I coordinated my July server updates were installed to simplify my admin (as both require reboot!)<\/p>\n<p>&nbsp;<\/p>\n<h1><strong>Have Security run additional scan to verify resolved<\/strong><\/h1>\n<p>Typically SME has scheduled scans that run weekly, and can run scans on-demand.\u00a0 Depending on urgency, you can decide whether or not waiting is relevant.<\/p>\n<p>Enjoy!<\/p>\n<p>&nbsp;<\/p>\n<h1><strong>Microsoft links<\/strong><\/h1>\n<p>Learn article <a href=\"https:\/\/learn.microsoft.com\/en-us\/sql\/connect\/odbc\/download-odbc-driver-for-sql-server?view=sql-server-ver16\" target=\"_blank\" rel=\"noopener\">here<\/a><\/p>\n<p>Download ODBC v18 <a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239549\" target=\"_blank\" rel=\"noopener\">here<\/a>, v17 <a href=\"https:\/\/go.microsoft.com\/fwlink\/?linkid=2239168\" target=\"_blank\" rel=\"noopener\">here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security &#8211; ODBC Vuln 175441 Time to make the doughnuts again, new Security ODBC Vuln 175441 that needs to be mitigated.\u00a0 Not sure if you ever saw the commercials, but this is where my mind goes sarcastic humor and all.\u00a0 Whether you&#8217;re using ACAS\/Tenable\/Nessus for security scans, this may show up with your SCOM servers &hellip; <a href=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Security &#8211; ODBC Vuln 175441&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[618,530,502],"tags":[626,609,627,628,287,624,625,342,539,629],"class_list":["post-19409","post","type-post","status-publish","format-standard","hentry","category-powerbi","category-scom","category-security","tag-acas","tag-nessus","tag-nessus-scanner","tag-odbc","tag-operations-manager","tag-powerbi","tag-powerbirs","tag-scom","tag-tenable","tag-vuln-175441"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog<\/title>\n<meta name=\"description\" content=\"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog\" \/>\n<meta property=\"og:description\" content=\"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin&#039;s Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-14T12:59:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"Security &#8211; ODBC Vuln 175441\",\"datePublished\":\"2023-07-14T12:59:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/\"},\"wordCount\":715,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/TimeToMakeTheDonuts.jpg\",\"keywords\":[\"ACAS\",\"nessus\",\"Nessus Scanner\",\"ODBC\",\"operations manager\",\"PowerBI\",\"PowerBIRS\",\"SCOM\",\"tenable\",\"Vuln 175441\"],\"articleSection\":[\"PowerBI\",\"SCOM\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/\",\"name\":\"Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/TimeToMakeTheDonuts.jpg\",\"datePublished\":\"2023-07-14T12:59:51+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/TimeToMakeTheDonuts.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/TimeToMakeTheDonuts.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/14\\\/security-odbc-vuln-175441\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security &#8211; ODBC Vuln 175441\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin&#039;s Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog","description":"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/","og_locale":"en_US","og_type":"article","og_title":"Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog","og_description":"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/","og_site_name":"Kevin Justin&#039;s Blog","article_published_time":"2023-07-14T12:59:51+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"Security &#8211; ODBC Vuln 175441","datePublished":"2023-07-14T12:59:51+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/"},"wordCount":715,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg","keywords":["ACAS","nessus","Nessus Scanner","ODBC","operations manager","PowerBI","PowerBIRS","SCOM","tenable","Vuln 175441"],"articleSection":["PowerBI","SCOM","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/","name":"Security - ODBC Vuln 175441 - Kevin Justin&#039;s Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg","datePublished":"2023-07-14T12:59:51+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Security scan shows a new ODBC Vuln 175441, that may impact SCOM or PowerBI Report Server talking with SQL servers.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/TimeToMakeTheDonuts.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/14\/security-odbc-vuln-175441\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Security &#8211; ODBC Vuln 175441"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin&#039;s Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19409"}],"version-history":[{"count":4,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19409\/revisions"}],"predecessor-version":[{"id":19424,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19409\/revisions\/19424"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}