Chocolatey Vulnerabilidad

Escribe

Not Defined4
Ruby Gem2

Producto

Chocolatey Azure-Pipelines-Agent Package2
Chocolatey Cmder Package2
Chocolatey Gem2

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined6

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent4
Network2

Autenticación

Not Defined0
High0
Low6
None0

La interacción del usuario

Not Defined0
Required0
None6

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤62
≤70
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤62
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤56
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k6
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k4
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

🔴 CTI Ocupaciones

Affected Products (5): Azure-Pipelines-Agent Package (1), Cmder Package (1), Gem (1), PHP Package (1), Package (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2022-11-294.94.8Chocolatey Azure-Pipelines-Agent Package agent escalada de privilegiosDesconocidoNot DefinedNot Defined0.000530.00CVE-2022-45306
2022-11-294.94.8Chocolatey Cmder Package escalada de privilegiosDesconocidoNot DefinedNot Defined0.000530.04CVE-2022-45304
2022-11-295.35.2Chocolatey Package Python311 escalada de privilegiosDesconocidoNot DefinedNot Defined0.000530.00CVE-2022-45305
2022-11-295.35.2Chocolatey Gem ruby31 escalada de privilegiosRuby GemNot DefinedNot Defined0.000530.00CVE-2022-45301
2022-11-295.35.2Chocolatey PHP Package php81 escalada de privilegiosProgramming Language SoftwareNot DefinedNot Defined0.000530.08CVE-2022-45307

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!