ID CVE-2021-42255
Summary AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.
References
Vulnerable Configurations
  • cpe:2.3:a:blueplanet-works:appguard:-:*:*:*:enterprise:windows:*:*
    cpe:2.3:a:blueplanet-works:appguard:-:*:*:*:enterprise:windows:*:*
CVSS
Base: 7.2 (as of 20-04-2022 - 13:51)
Impact:
Exploitability:
CWE CWE-668
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
Last major update 20-04-2022 - 13:51
Published 12-04-2022 - 16:15
Last modified 20-04-2022 - 13:51
Back to Top