Problem Note 35722: URL parameters passed by SAS® Digital Market are visible, which creates the potential for misuse
URL parameters, which could include the recipient's name in a hosted version of an e-mail message, are visible and, therefore, vulnerable to potential misuse by hackers.
Select the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| SAS System | SAS Digital Marketing | Microsoft Windows 2000 Advanced Server | 5.1 | | 9.1 TS1M3 SP4 | |
| Microsoft Windows 2000 Datacenter Server | 5.1 | | 9.1 TS1M3 SP4 | |
| Microsoft Windows 2000 Server | 5.1 | | 9.1 TS1M3 SP4 | |
| Microsoft Windows 2000 Professional | 5.1 | | 9.1 TS1M3 SP4 | |
| Microsoft Windows NT Workstation | 5.1 | | 9.1 TS1M3 SP4 | |
| Microsoft Windows Server 2003 Datacenter Edition | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| Microsoft Windows Server 2003 Enterprise Edition | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| Microsoft Windows Server 2003 Standard Edition | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| Microsoft Windows XP Professional | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| Windows Vista | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| 64-bit Enabled AIX | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| 64-bit Enabled HP-UX | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| 64-bit Enabled Solaris | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| HP-UX IPF | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
| Linux | 5.1 | 5.3 | 9.1 TS1M3 SP4 | 9.2 TS2M2 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
URL parameters passed via SAS Digital Marketing, which could include the recipient's name in a hosted version of an e-mail message, are visible and available for potential misuse. This needs to be prevented. A hot fix is planned for this issue.
| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2009-06-03 09:30:53 |
| Date Created: | 2009-04-29 06:00:35 |
