SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 55009: Data not validated by the SAS® Web Application Server might be entered in SAS® Marketing Optimization, creating a security vulnerability

DetailsHotfixAboutRate It

There is a security vulnerability in SAS Marketing Optimization whereby SQL queries are being run on the SAS Web Application Server without validation.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Marketing OptimizationSolaris for x646.39.4 TS1M3
Linux for x646.39.4 TS1M3
HP-UX IPF6.39.4 TS1M3
64-bit Enabled Solaris6.39.4 TS1M3
64-bit Enabled AIX6.39.4 TS1M3
Microsoft® Windows® for x646.39.4 TS1M3
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.