Problem

A security vulnerability exists in SAS Cloud Analytic Services (CAS) in SAS^® Viya™ 3.1. An attacker with knowledge of this vulnerability and network access to the CAS server can access restricted data.

Update Your Software to Fix This Issue

Important: All production sites should apply the update for this problem.

The correction for the issue is to update your version of SAS Viya. A link to the software update and instructions is available on the Hot Fix tab. To access this link, click the Hot Fix tab in this note.

Now Verify That the Update Has Been Installed

It is important that you now verify that the fix is installed. To do so, run the following rpm commands:

To complete this process, make sure that the package versions shown in the rpm output match or are newer than the following.

If You Need Additional Assistance

If needed, contact SAS Technical Support.

Operating System and Release Information

An update for this issue is available. For instructions on how to access and apply software updates, see the Software Updates section of the SAS Viya 3.1 Administration document at