55209 - The operational area chooser screens in SAS® Enterprise GRC might contain security vulnerabilities

Problem Note 55209: The operational area chooser screens in SAS® Enterprise GRC might contain security vulnerabilities

SAS Enterprise GRC might not handle user input correctly for some operational area chooser screens, causing a security vulnerability.

There is no workaround for this problem.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Enterprise GRC	Solaris for x64	6.1		9.4 TS1M2
		Linux for x64	6.1		9.4 TS1M2
		Microsoft Windows 8 Pro 32-bit	6.1		9.4 TS1M2
		Microsoft Windows 8 Enterprise x64	6.1		9.4 TS1M2
		Microsoft Windows 8 Enterprise 32-bit	6.1		9.4 TS1M2
		HP-UX IPF	6.1		9.4 TS1M2
		64-bit Enabled Solaris	6.1		9.4 TS1M2
		64-bit Enabled AIX	6.1		9.4 TS1M2
		Windows 7 Ultimate x64	6.1		9.4 TS1M2
		Windows 7 Ultimate 32 bit	6.1		9.4 TS1M2
		Windows 7 Professional x64	6.1		9.4 TS1M2
		Windows 7 Professional 32 bit	6.1		9.4 TS1M2
		Windows 7 Home Premium x64	6.1		9.4 TS1M2
		Windows 7 Home Premium 32 bit	6.1		9.4 TS1M2
		Windows 7 Enterprise x64	6.1		9.4 TS1M2
		Windows 7 Enterprise 32 bit	6.1		9.4 TS1M2
		Microsoft Windows Server 2012 Std	6.1		9.4 TS1M2
		Microsoft Windows Server 2012 R2 Std	6.1		9.4 TS1M2
		Microsoft Windows Server 2012 R2 Datacenter	6.1		9.4 TS1M2
		Microsoft Windows Server 2012 Datacenter	6.1		9.4 TS1M2
		Microsoft Windows Server 2008 for x64	6.1		9.4 TS1M2
		Microsoft Windows Server 2008 R2	6.1		9.4 TS1M2
		Microsoft Windows Server 2008	6.1		9.4 TS1M2
		Microsoft Windows 8.1 Pro 32-bit	6.1		9.4 TS1M2
		Microsoft Windows 8.1 Pro	6.1		9.4 TS1M2
		Microsoft Windows 8.1 Enterprise x64	6.1		9.4 TS1M2
		Microsoft Windows 8.1 Enterprise 32-bit	6.1		9.4 TS1M2
		Microsoft Windows 8 Pro x64	6.1		9.4 TS1M2
		Microsoft® Windows® for x64	6.1		9.4 TS1M2

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Enterprise GRC 6.1 is available at:

Type:	Problem Note
Priority:	high

Date Modified:	2017-02-08 22:01:56
Date Created:	2015-02-12 03:24:38