CVE-2022-45306

🗓️ 29 Nov 2022 02:09:15Reported by mitreType

Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below

Reporter	Title	Published	Views	Family All 4
Prion	Design/Logic Flaw	29 Nov 202202:15	–	prion
Cvelist	CVE-2022-45306	29 Nov 202200:00	–	cvelist
NVD	CVE-2022-45306	29 Nov 202202:15	–	nvd
CNVD	Chocolatey Azure Pipelines Agent Privilege Design Vulnerability	1 Dec 202200:00	–	cnvd

Nvd

Node

chocolatey chocolatey_azure-pipelines-agentRange≤2.211.1

Source	Link
github	www.github.com/ycdxsb/Vuln/blob/main/azure-pipelines-agent-weak-permission-vuln/azure-pipelines-agent-weak-permission-vuln.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Nov 2022 02:15Current

4.7Medium risk

Vulners AI Score4.7

CVSS34.3

EPSS0.00034

CWE-732