PT-2025-41841

CVE-2025-42909

·

Published

2025-10-14

·

Updated

2026-10-08

Description by

CVSS 3.1
3.0
Low
MetricsAV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP Cloud Appliance Library Appliances (affected versions not specified)
Description An attacker with high privileges can exploit an insecure default profile setting within existing SAP CAL appliances to gain access to other appliances. The issue has a low impact on the confidentiality of the application, and does not impact integrity or availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾