PT-2022-27464 · Microsoft · Chocolatey Azure-Pipelines-Agent

Name of the Vulnerable Software and Affected Versions: Chocolatey Azure-Pipelines-Agent versions 2.211.1 and below Description: The issue is related to insecure permissions in the Chocolatey Azure-Pipelines-Agent package, which grants all users in the Authenticated Users group write privileges fo...