CB Response: Cannot add hashes to banned list

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Adding hash to Banned list within UI leads to no results
• CPU on Response Server spikes to 100% under Java process
• HAR file shows:

  "405" Method not allowed
  POST https://<server>:port/api/v1/banning/blacklist

Environment

• CB Response Server: 6.2.4

Cause

Root cause has not been identified, but is believed to be an issue within Response Server 6.2.4

Resolution

Upgrading to Response Server 6.4.1 and higher resolves this issue.