Problem Note 60408: The JCraft and JSch libraries that reside in the SAS® Environment Manager server and agent are vulnerable to directory traversal
Severity: Medium
Description: The SAS Environment Manager server and agent contain JCraft and JSch libraries that are vulnerable to directory traversal (CVE-2016-5725).
Potential Impact: Users might gain unauthorized access to the file system.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
SAS System | SAS Environment Manager | Microsoft® Windows® for x64 | 9.4 TS1M0 | 9.4 TS1M5 |
64-bit Enabled AIX | 9.4 TS1M0 | 9.4 TS1M5 |
64-bit Enabled Solaris | 9.4 TS1M0 | 9.4 TS1M5 |
HP-UX IPF | 9.4 TS1M0 | 9.4 TS1M5 |
Linux for x64 | 9.4 TS1M0 | 9.4 TS1M5 |
Solaris for x64 | 9.4 TS1M0 | 9.4 TS1M5 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Type: | Problem Note |
Priority: | alert |
Date Modified: | 2018-04-05 11:38:43 |
Date Created: | 2017-05-04 11:29:22 |