CVE-2022-26100

published 2022-03-10

CVE-2022-26100: SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	sapcar	—	—
sap_se	sapcar	< 7.22	7.22

CWE-129 CWE-20