*** PLEASE PROVIDE CONTACT IF INCORRECT FORUM *** - ImagePath of RDAgentBootloader fails
- Dominant language
- PowerShell
- Stars
- 524
- Forks
- 610
- PR merge metrics
- No merged PRs in 30d
Description
The RDAgentBootloader available in Windows 11 24H2 Multi-Session VMs from Azure Marketplace is RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe
This creates a reg entry ImagePath of
`C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe`
This causes assessment scans to fail because the path is vulnerable to injection because it is not encapsulated in quotes (""). It should be:
`"C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe"`
When using the latest version of the BootLoader (1.0.9023), the ImagePath within registry is reported correctly as:
`"C:\Program Files\Microsoft RDInfra\RDAgentBootLoaderRDAgentBootLoader_1.0.9023.1100\RDAgentBootLoader.exe"`
and therefore passes vulnerability scans.
Contributor guide
No contributing guide indexed for this repository
Research direction
No repository file, test, or entry point is identified. First verify whether the affected Azure Marketplace image and RDAgentBootloader are maintained by this repository; confirm the registry ImagePath behavior for versions 1.0.8925.0 and 1.0.9023, then identify the owning component or documented fix path. Done means the vulnerable unquoted path is corrected or the issue is routed to its owner.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100