CVE-2022-45304 – Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the …

Vuln ID: CVE-2022-45304

Published:  2022-11-29  02:15:09Z

Description: Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:toolsCmder and all files located in that folder.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):