Read the docs

chocolatey

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

chocolatey records in CISA KEV

No chocolatey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Boxstarter 1 record LOW Chocolatey Azure-pipelines-agent 1 record LOW Chocolatey Cmder 1 record LOW Chocolatey Php 1 record LOW Chocolatey Python3 1 record LOW Chocolatey Ruby 1 record LOW

Records

1 record in Chocolatey Azure-pipelines-agent · all components

TI-2022-22299 CVE-2022-45306 · GHSA-95r5-fj57-4c78

Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below…

Priority LOW 20

Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0039 Published 2022-11-29 No fix listed CWE-732
Open these records in search →