Carbon Black Cloud: Vulnerability Management reports not available / completing for some sensors
search cancel

Carbon Black Cloud: Vulnerability Management reports not available / completing for some sensors

book

Article ID: 290886

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

  • After installing the sensor and waiting several days, there are no "Vulnerabilities" appearing in the Endpoint's details pane; Vulnerabilities section.
  • Selecting the "reassess" option never returns an updated date, even after many days.
  • The  C:\ProgramData\CarbonBlack\Logs\LiveQuery.log contains errors such as:
    10/25/22 10:32:58.524: d80 INFO CbProcessHelper::Run: Waiting for output 
    10/25/22 10:32:58.525: a94 INFO CbProcessHelper::ProcessMonitorLoop: Starting monitor thread (priority level -1) (target pid 1912) 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Process[1912] exited and all output read. 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Child process exiting, killing monitor thread. 
    10/25/22 10:33:01.074: a94 INFO CbProcessHelper::ProcessMonitorLoop: Monitoring complete, closing this thread (target pid 1912) 
    10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Exiting: Child created[1] m_RetCode[0, 0x0] 
    10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Cannot start extension manager: Extension not autoloaded] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[An error occurred during extension manager startup: Required extension not found or not loaded:] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to lookup path information for process] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to get cwd for]

     

Environment

  • CBC Console: All versions
  • CBC Sensor: All Windows versions

Cause

This is tracked as a known issue CBC-22192.

Resolution

CBC-22192 backend issue was fixed as of Nov 5th, 2022. There is no need to change/update sensors.