chocolatey kayıtları

chocolatey üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2020-15264İstismar yok	Privilege Escalation in Boxstarterchocolatey · boxstarter · CWE-73 Yol geçişi Yerel yetki yükseltme	Yüksek7,8	—	%1,5	20 Eki 2020
17İzleyin	CVE-2022-45301İstismar yok	Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for thchocolatey · chocolatey ruby · CWE-732	Orta4,3	—	%0,3	28 Kas 2022
17İzleyin	CVE-2022-45304İstismar yok	Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for thchocolatey · chocolatey cmder · CWE-732	Orta4,3	—	%0,3	28 Kas 2022
17İzleyin	CVE-2022-45305İstismar yok	Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for chocolatey · chocolatey python3 · CWE-732	Orta4,3	—	%0,3	28 Kas 2022
17İzleyin	CVE-2022-45306İstismar yok	Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write chocolatey · chocolatey azure-pipelines-agent · CWE-732	Orta4,3	—	%0,3	28 Kas 2022
17İzleyin	CVE-2022-45307İstismar yok	Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the chocolatey · chocolatey php · CWE-732	Orta4,3	—	%0,3	28 Kas 2022

CVE-2020-15264
31İzleyin
Privilege Escalation in Boxstarter
YüksekCVSS 7,8İstismar yokEPSS %1
- Yol geçişi
- Yerel yetki yükseltme
chocolatey · boxstarter20 Eki 2020
CVE-2022-45301
17İzleyin
Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for th
OrtaCVSS 4,3İstismar yokEPSS %0
chocolatey · chocolatey ruby28 Kas 2022
CVE-2022-45304
17İzleyin
Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for th
OrtaCVSS 4,3İstismar yokEPSS %0
chocolatey · chocolatey cmder28 Kas 2022
CVE-2022-45305
17İzleyin
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for
OrtaCVSS 4,3İstismar yokEPSS %0
chocolatey · chocolatey python328 Kas 2022
CVE-2022-45306
17İzleyin
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write
OrtaCVSS 4,3İstismar yokEPSS %0
chocolatey · chocolatey azure-pipelines-agent28 Kas 2022
CVE-2022-45307
17İzleyin
Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the
OrtaCVSS 4,3İstismar yokEPSS %0
chocolatey · chocolatey php28 Kas 2022