CVE-2025-43001
Multiple Privilege Escalation Vulnerabilities in SAPCAR
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Multiple Privilege Escalation Vulnerabilities in SAPCAR
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.
Reserved 2025-04-16 | Published 2025-07-08 | Updated 2025-07-11 | Assigner sapCWE-266: Incorrect Privilege Assignment
Support options
