35924 - An unauthenticated user can modify preferences for the Public Kiosk in SAS® Information Delivery Portal

Problem Note 35924: An unauthenticated user can modify preferences for the Public Kiosk in SAS® Information Delivery Portal

Unauthenticated users might be able to edit the preferences for the Public Kiosk in the SAS Information Delivery Portal.

This can occur when public access points or URLs allow you to log in as a public or guest user.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Information Delivery Portal	Microsoft Windows 2000 Advanced Server	2.0		9.1 TS1M3 SP4
		Microsoft Windows 2000 Datacenter Server	2.0		9.1 TS1M3 SP4
		Microsoft Windows 2000 Server	2.0		9.1 TS1M3 SP4
		Microsoft Windows 2000 Professional	2.0		9.1 TS1M3 SP4
		Microsoft Windows NT Workstation	2.0		9.1 TS1M3 SP4
		Microsoft Windows Server 2003 Datacenter Edition	2.0		9.1 TS1M3 SP4
		Microsoft Windows Server 2003 Enterprise Edition	2.0		9.1 TS1M3 SP4
		Microsoft Windows Server 2003 Standard Edition	2.0		9.1 TS1M3 SP4
		Microsoft Windows XP Professional	2.0		9.1 TS1M3 SP4
		Windows Vista	2.0		9.1 TS1M3 SP4
		64-bit Enabled AIX	2.0		9.1 TS1M3 SP4
		64-bit Enabled Solaris	2.0		9.1 TS1M3 SP4
		HP-UX IPF	2.0		9.1 TS1M3 SP4

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Information Delivery Portal 9.1.3 is available at:

Type:	Problem Note
Priority:	high
Topic:	Query and Reporting ==> Report Distribution System Administration ==> Security ==> Authentication

Date Modified:	2009-05-26 13:36:14
Date Created:	2009-05-14 12:45:18