54960 - The SAS® Logon Manager might be vulnerable to reflected cross-site scripting attacks

Problem Note 54960: The SAS® Logon Manager might be vulnerable to reflected cross-site scripting attacks

The SAS Logon Manager has a potential vulnerability to reflected cross-site scripting attacks.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Web Infrastructure Platform	Microsoft Windows 8 Enterprise x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows 8 Pro x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2008 R2	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2008 for x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2012 Datacenter	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2012 R2 Datacenter	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2012 R2 Std	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows Server 2012 Std	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		64-bit Enabled AIX	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		64-bit Enabled Solaris	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Linux for x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Solaris for x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows 8.1 Enterprise 32-bit	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows 8.1 Enterprise x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows 8.1 Pro	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft Windows 8.1 Pro 32-bit	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Microsoft® Windows® for x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		HP-UX IPF	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Windows 7 Professional x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3
		Windows 7 Enterprise x64	9.4	9.4_M3	9.4 TS1M0	9.4 TS1M3

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Middle Tier 9.4_M2 is available at:

A fix for this issue for SAS Middle Tier 9.4 is available at:

SAS Logon Manager might be vulnerable to reflect cross-site scripting attacks.

Type:	Problem Note
Priority:	high

Date Modified:	2015-01-14 13:02:24
Date Created:	2015-01-08 10:16:10