SAPCAR Hard Link Privilege Escalation Vulnerability

SAPCAR Hard Link Privilege Escalation Vulnerability

CVE-2016-5847 · MEDIUM Severity

AV:L/AC:M/AU:N/C:P/I:P/A:P

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384.

Learn more about our User Device Pen Test.