CVE-2025-42992CWE-266

Multiple Privilege Escalation Vulnerabilities in SAPCAR

Medium · published July 8, 2025

CVSS v3.1
6.9
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privilege escalation. This has high impact on integrity, but low impact on confidentiality and availability of the system.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00140 · 3.0th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-07-08T00:38Z
EPSS history
Timeline
  • 08 JUL 00:38Z
    Multiple Privilege Escalation Vulnerabilities in SAPCAR
    cvelistv5