SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.
[
{
"product": "SAPCAR",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 7.22"
}
]
}
]