CNNVD-202507-820 Information

CNNVD ID

CNNVD-202507-820

CVE-2025-43001

  • CNNVD Published: 2025-07-08

Description (Chinese)

SAP SAPCAR是德国思爱普(SAP)公司的一款用于压缩和/或解压缩 SAP 存档文件的实用程序。。 SAP SAPCAR存在安全漏洞,该漏洞源于高权限用户可覆盖目录权限,可能导致权限提升。

Description (English)

SAP SAPCAR is a practical program for compressing and/or compressing SAP files. SAP SAPCAR has a security loophole, which stems from the fact that users with high privileges can overwhelm directory privileges, which may lead to an increase in privileges.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

思爱普

Published

2025-07-08

Last Modified

2026-02-24

References

https://me.sap.com/notes/3595143 https://url.sap/sapsecuritypatchday

Patch

https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html

Share on: