Vulnerability · Published Jul 8, 2025 · Assigned by sap
CVE-2025-43001Multiple Privilege Escalation Vulnerabilities in SAPCAR
Medium 6.9
In plain English
A medium-severity security flaw in SAPCAR from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify the critical files by tampering with signed archives without breaking the signature, but it has a low impact on the confidentiality and availability of the system.
Affected products (as reported)
Weakness: CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L