Problem Note 14298: Information Delivery Portal accepts encoded password at logon prompt
The Information Delivery Portal excepts encoded passwords to be entered
at the logon prompt, possibly allowing non-authorized users access to
the portal.
A fix for SAS 9.1.3 (9.1 TS1M3) for this issue is available at:
http://www.sas.com/techsup/download/hotfix/e9_sbcs_prod_list.html#014298
For customers running SAS with Asian Language Support (DBCS), this
fix should be downloaded from:
http://www.sas.com/techsup/download/hotfix/e9_dbcs_prod_list.html#014298
Operating System and Release Information
| SAS System | SAS Information Delivery Portal | Microsoft Windows NT Workstation | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| Microsoft Windows 2000 Server | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| Microsoft Windows 2000 Advanced Server | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| Microsoft Windows 2000 Datacenter Server | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| Microsoft Windows 2000 Professional | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| HP-UX | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| 64-bit Enabled Solaris | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| Solaris | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| 64-bit Enabled HP-UX | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| 64-bit Enabled AIX | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
| AIX | 2.0 | 2.0 | 9.1 TS1M0 | 9.1 TS1M3 SP2 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
| Type: | Problem Note |
| Priority: | high |
| Topic: | System Administration ==> Servers ==> Portal
|
| Date Modified: | 2005-04-27 14:20:52 |
| Date Created: | 2005-01-21 13:04:24 |
