Input Validation Flaw in SAPCAR Archive Processing by SAP
CVE-2022-26100

9.8CRITICAL

Key Information:

Vendor

SAP
Status
SAPcar
Vendor
CVE Published:
10 March 2022

What is CVE-2022-26100?

The SAPCAR tool in version 7.22 is affected by an input validation flaw that can lead to process crashes. Attackers may exploit this vulnerability to gain unauthorized access to the system, making it essential for users to apply recommended security measures. Regular updates and patches are crucial for maintaining the integrity and security of the SAP environment.

Affected Version(s)

SAPCAR < 7.22

References

https://launchpad.support.sap.com/#/notes/3111110
x_refsource_MISC
https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.