Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\agent and all files located in that folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Chocolatey Azure-Pipelines-Agent 安全漏洞
Vulnerability Description
Chocolatey Azure-Pipelines-Agent是Chocolatey公司的由chocolatey管理的软件包Azure-Pipelines-Agent。 Chocolatey Azure-Pipelines-Agent package v2.211.1版本及之前版本存在安全漏洞。攻击者利用该漏洞获得文件写入权限。
CVSS Information
N/A
Vulnerability Type
N/A