SAP SAPCAR Privilege Escalation Vulnerability

A vulnerability in SAPCAR allows an attacker with high privileges to create a malicious SAR archive. This could be exploited to manipulate critical files and directory permissions without disrupting signature validation, potentially leading to unauthorized privilege escalation. The vulnerability has a high impact on integrity but a low impact on confidentiality and availability.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP Security Patch Day Bulletin. Instructions for accessing SAP Security Notes can be found on the SAP Security Notes FAQs page.