CVE-2022-45307 - Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder

Back Back to CVE browser

MEDIUM

Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder

Published Nov 29, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.38%

Description

Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48206
Advisory
https://github.com/ycdxsb/Vuln/blob/main/php-weak-permission-vuln/php-weak-permission-vuln.md
Broken LinkThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48206		Advisory
https://github.com/ycdxsb/Vuln/blob/main/php-weak-permission-vuln/php-weak-permission-vuln.md		Broken LinkThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 29, 2022

Updated Apr 25, 2025

Reserved Nov 14, 2022

Link CVE-2022-45307

CISA Vulnrichment

Updated Apr 25, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-45307

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 29, 2022

Updated Apr 25, 2025

Link EUVD-2022-48206

GitHub

No data