Back to Database
Status published
Unknown
CVE-2022-45306
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants...
Vulnerability Description
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45306
Credits & Attribution
No credits recorded in the NVD database.
More from chocolatey
View All →CVE-2022-45307
Insecure permissions in Chocolatey PHP package v8.1.12 and below grants...
Unknown
0
CVE-2022-45305
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants...
Unknown
0
CVE-2022-45304
Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants...
Unknown
0
CVE-2022-45301
Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants...
Unknown
0
CVE-2020-15264
Privilege Escalation in Boxstarter
High
8
Affected Vendor
chocolatey
View all reports →Affected Software
chocolatey azure-pipelines-agent
Vulnerable Versions:
0
Timeline
Official Publish:
November 29th, 2022
Last Modified:
April 25th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.