Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Vulnerability Management reports not available / completing for some sensors

Carbon Black Cloud: Vulnerability Management reports not available / completing for some sensors

Environment

  • CBC Console: All versions
  • CBC Sensor: All Windows versions

Symptoms

  • After installing the sensor and waiting several days, there are no "Vulnerabilities" appearing in the Endpoint's details pane; Vulnerabilities section.
  • Selecting the "reassess" option never returns an updated date, even after many days.
  • The  C:\ProgramData\CarbonBlack\Logs\LiveQuery.log contains errors such as:
    10/25/22 10:32:58.524: d80 INFO CbProcessHelper::Run: Waiting for output 
    10/25/22 10:32:58.525: a94 INFO CbProcessHelper::ProcessMonitorLoop: Starting monitor thread (priority level -1) (target pid 1912) 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Process[1912] exited and all output read. 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Child process exiting, killing monitor thread. 
    10/25/22 10:33:01.074: a94 INFO CbProcessHelper::ProcessMonitorLoop: Monitoring complete, closing this thread (target pid 1912) 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Exiting: Child created[1] m_RetCode[0, 0x0] 
    10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Cannot start extension manager: Extension not autoloaded] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[An error occurred during extension manager startup: Required extension not found or not loaded:] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to lookup path information for process] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to get cwd for]

     

Cause

This is tracked as a known issue CBC-22192.

Resolution

CBC-22192 backend issue was fixed as of Nov 5th, 2022. There is no need to change/update sensors.

 

Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎10-28-2022
Views:
417
Contributors