Lucene search
PRIOn knowledge basePRION:CVE-2022-45306HistoryNov 29, 2022 - 2:15 a.m.
Design/Logic Flaw
2022-11-2902:15:00
PRIOn knowledge base
www.prio-n.com
2
design flaw
logic flaw
insecure permissions
chocolatey
azure
pipelines
agent
vulnerability
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chocolatey_azure-pipelines-agent | le | 2.211.1 |
Related
cvelist
cvelist
CVE-2022-45306
2022-11-29 00:00:00
cve
cve
CVE-2022-45306
2022-11-29 02:15:09
cnvd
cnvd
Chocolatey Azure Pipelines Agent Privilege Design Vulnerability
2022-12-01 00:00:00
nvd
nvd
CVE-2022-45306
2022-11-29 02:15:09