Starting with version 5.2.8, the Mac agent will test for and report when a Mac running Mac OS 10.5 or later is vulnerable to the ShellShock vulnerability. (Note that OS X 10.10 is not vulnerable by default.)
Because the issue is widespread, a decision was made not to trigger an alert if bash is un-patched. Reports can be run in the Watchman Monitoring dashboard to see the status of computers.
How can this article be improved?
Please sign in to leave a comment.