Azure / Azure/RDS-Templates

*** PLEASE PROVIDE CONTACT IF INCORRECT FORUM *** - ImagePath of RDAgentBootloader fails

Open
#819 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
PowerShell
Stars
524
Forks
610
PR merge metrics
No merged PRs in 30d

Description

The RDAgentBootloader available in Windows 11 24H2 Multi-Session VMs from Azure Marketplace is RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe

This creates a reg entry ImagePath of

`C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe`

This causes assessment scans to fail because the path is vulnerable to injection because it is not encapsulated in quotes (""). It should be:

`"C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe"`

When using the latest version of the BootLoader (1.0.9023), the ImagePath within registry is reported correctly as:

`"C:\Program Files\Microsoft RDInfra\RDAgentBootLoaderRDAgentBootLoader_1.0.9023.1100\RDAgentBootLoader.exe"`

and therefore passes vulnerability scans.

Contributor guide

No contributing guide indexed for this repository

Research direction

No repository file, test, or entry point is identified. First verify whether the affected Azure Marketplace image and RDAgentBootloader are maintained by this repository; confirm the registry ImagePath behavior for versions 1.0.8925.0 and 1.0.9023, then identify the owning component or documented fix path. Done means the vulnerable unquoted path is corrected or the issue is routed to its owner.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.