The RDAgentBootloader available in Windows 11 24H2 Multi-Session VMs from Azure Marketplace is RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe
This creates a reg entry ImagePath of
C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe
This causes assessment scans to fail because the path is vulnerable to injection because it is not encapsulated in quotes (""). It should be:
"C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe"
When using the latest version of the BootLoader (1.0.9023), the ImagePath within registry is reported correctly as:
"C:\Program Files\Microsoft RDInfra\RDAgentBootLoaderRDAgentBootLoader_1.0.9023.1100\RDAgentBootLoader.exe"
and therefore passes vulnerability scans.
The RDAgentBootloader available in Windows 11 24H2 Multi-Session VMs from Azure Marketplace is RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe
This creates a reg entry ImagePath of
C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exeThis causes assessment scans to fail because the path is vulnerable to injection because it is not encapsulated in quotes (""). It should be:
"C:\Program Files\Microsoft RDInfra\RDAgentBootLoader_1.0.8925.0\RDAgentBootLoader.exe"When using the latest version of the BootLoader (1.0.9023), the ImagePath within registry is reported correctly as:
"C:\Program Files\Microsoft RDInfra\RDAgentBootLoaderRDAgentBootLoader_1.0.9023.1100\RDAgentBootLoader.exe"and therefore passes vulnerability scans.