CVE-2025-42992
Multiple Privilege Escalation Vulnerabilities in SAPCAR
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.
Reserved 2025-04-16 | Published 2025-07-08 | Updated 2025-07-11 | Assigner sapCWE-266: Incorrect Privilege Assignment
Support options
