https://www.systemtek.co.uk/2020/11/chocolatey-boxstarter-is-vulnerable-to-privilege-escalation-due-to-weak-acls-cve-2020-15264/
Chocolatey Boxstarter is vulnerable to privilege escalation due to weak ACLs [CVE-2020-15264]