59019 - SAS® Environment Manager middle tier web applications allow unauthorized access to certain URLs

Problem Note 59019: SAS® Environment Manager middle tier web applications allow unauthorized access to certain URLs

Severity: Medium

Description:SAS^® Environment Manager middle tier web applications allow unauthorized access to certain URLs.

Potential Impact: A user lacking appropriate role authorization might gain access to the web application.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Environment Manager	Solaris for x64	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4
		Linux for x64	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4
		HP-UX IPF	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4
		64-bit Enabled Solaris	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4
		64-bit Enabled AIX	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4
		Microsoft® Windows® for x64	2.5	2.5_M1	9.4 TS1M3	9.4 TS1M4

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Environment Manager Mid-Tier 2.5 is available at:

Type:	Problem Note
Priority:	high

Date Modified:	2016-10-31 10:35:51
Date Created:	2016-09-21 09:09:24