CVE-2021-42255

AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.

CVSS v3 7.8 HIGH
CVSS v2.0 7.2 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0022/MNDT-2022-0022.md	Third Party Advisory
https://www.beyondtrust.com/blog	Not Applicable

Configurations

Configuration 1 (hide)

cpe:2.3:a:blueplanet-works:appguard:*:*:*:*:enterprise:windows:*:*

History

No history.

Information

Published : 2022-04-12 16:15

Updated : 2024-02-28 19:09

NVD link : CVE-2021-42255

Mitre link : CVE-2021-42255

CVE.ORG link : CVE-2021-42255

JSON object : View

Products Affected

blueplanet-works

appguard

CWE

CWE-668

Exposure of Resource to Wrong Sphere

{"id": "CVE-2021-42255", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-04-12T16:15:08.343", "references": [{"url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0022/MNDT-2022-0022.md", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.beyondtrust.com/blog", "tags": ["Not Applicable"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-668"}]}], "descriptions": [{"lang": "en", "value": "AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user."}, {"lang": "es", "value": "AppGuard Enterprise antes de 6.7.100.1 crea un archivo temporal en un directorio con permisos inseguros. Los usuarios locales pueden obtener privilegios de SYSTEM porque una operaci\u00f3n de reparaci\u00f3n se basa en el directorio %TEMP% de un usuario sin privilegios"}], "lastModified": "2022-04-20T13:51:45.480", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:blueplanet-works:appguard:*:*:*:*:enterprise:windows:*:*", "vulnerable": true, "matchCriteriaId": "88B46157-6D71-4C26-8365-DBCEE718B6A7", "versionEndExcluding": "6.7.100.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}