Problem Note 60498: Platform Suite for SAS® contains a security vulnerability that enables unauthorized users to escalate their privileges
 |  |  |  |  |
Severity: High
Description: The Platform LSF (Load Sharing Facility) product in Platform Suite for SAS contains a security issue. See the IBM Security Bulletin: Privilege Escalation / User Impersonation affects IBM Platform LSF and IBM Spectrum LSF for more information.
Potential Impact: Users might be able to escalate their privileges.
Click the Downloads tab in this note to obtain the fix.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | Platform LSF | Windows 7 Ultimate x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 |
| Windows 7 Ultimate 32 bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Professional x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Professional 32 bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Home Premium x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Home Premium 32 bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Enterprise x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Windows 7 Enterprise 32 bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows Server 2012 Std | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows Server 2012 R2 Std | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows Server 2012 R2 Datacenter | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows Server 2012 Datacenter | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows Server 2008 for x64 | 9.11 | 9.4 TS1M2 | ||||
| Microsoft Windows Server 2008 R2 | 9.11 | 9.4 TS1M2 | ||||
| Microsoft Windows Server 2008 | 9.11 | 9.4 TS1M2 | ||||
| Microsoft Windows 10 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8.1 Pro x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8.1 Pro 32-bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8.1 Enterprise x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8.1 Enterprise 32-bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8 Pro x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft® Windows® for x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8 Enterprise 32-bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8 Pro 32-bit | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Microsoft Windows 8 Enterprise x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| 64-bit Enabled AIX | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
| Linux for x64 | 9.11 | 10.1 | 9.4 TS1M2 | 9.4 TS1M5 | ||
If you run Platform LSF 8.01, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#R03004.
If you run Platform LSF 9.1.3, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#B1A002.
If you run Platform LSF 9.1.1.1, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#T02005.
If you run Platform Grid Management Service 8.01, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#U96001.
If you run Platform Process Manager 9.1, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#T09002.
If you run Platform Process Manager 9.1.3, download the patch from the following page: ftp.sas.com/techsup/download/hotfix/platformpatch.html#C5Z001.
| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2017-09-11 13:32:00 |
| Date Created: | 2017-05-18 12:27:21 |