Problem Note 43869: The database user name and password in the SAS® Digital Marketing web.xml file are in plaintext
 |  |  |  |  |
The SAS Digital Marketing web.xml file contains the database user name and password in plaintext. This is considered a security weakness.
A hot fix for SAS Digital Marketing 5.3 is available upon request from Technical Support.
For SAS Digital Marketing 5.4 and SAS Digital Marketing 5.4_M1 click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Digital Marketing | Microsoft Windows 95/98 | 5.3_M3 | |||
| Microsoft Windows 2000 Advanced Server | 5.3_M3 | |||||
| Microsoft Windows 2000 Datacenter Server | 5.3_M3 | |||||
| Microsoft Windows 2000 Server | 5.3_M3 | |||||
| Microsoft Windows 2000 Professional | 5.3_M3 | |||||
| Microsoft Windows NT Workstation | 5.3_M3 | |||||
| Microsoft Windows Server 2003 Datacenter Edition | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows Server 2003 Enterprise Edition | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows Server 2003 Standard Edition | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows Server 2003 for x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows Server 2008 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows Server 2008 for x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Microsoft Windows XP Professional | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Enterprise 32 bit | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Enterprise x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Home Premium 32 bit | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Home Premium x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Professional 32 bit | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Professional x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Ultimate 32 bit | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows 7 Ultimate x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows Millennium Edition (Me) | 5.3_M3 | |||||
| Windows Vista | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Windows Vista for x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| 64-bit Enabled AIX | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| 64-bit Enabled HP-UX | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| 64-bit Enabled Solaris | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| HP-UX IPF | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Linux | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
| Solaris for x64 | 5.3_M3 | 6.1 | 9.3 TS1M2 | |||
A fix for this issue for SAS Digital Marketing 5.4_M1 is available at:
http://ftp.sas.com/techsup/download/hotfix/HF2/E12.html#43869A fix for this issue for SAS Digital Marketing 5.41 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/F60.html#43869| Type: | Problem Note |
| Priority: | medium |
| Date Modified: | 2011-12-05 13:07:19 |
| Date Created: | 2011-08-01 09:43:08 |