CVE-2022-45305 – Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in t …

Vuln ID: CVE-2022-45305

Published:  2022-11-29  02:15:09Z

Description: Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:Python311 and all files located in that folder.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):