CVE-2021-42255

HIGH 7.8CVE-2021-42255 · Published 12/04/2022 · updated 17/06/2026

In short

CVE-2021-42255 is a HIGH (CVSS 7.8) vulnerability affecting appguard (blueplanet-works).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.8% of all vulnerabilities.
Fix: update to 6.7.100.1 or later.

Package	Affected versions	Patched versions
appguard blueplanet-works	`< 6.7.100.1`	`6.7.100.1`

Description

AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.

References

mandiant/Vulnerability-Disclosures · Third Party Advisory
beyondtrust.com/blog · Not Applicable

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free