SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 60362: The SAS® Visual Analytics Hub allows uploading of potentially malicious executable files in the comments (CVE-2014-5454)

DetailsHotfixAboutRate It

Severity: Medium

Description: The SAS Visual Analytics Hub allows uploading of potentially malicious executable files in the comments. For more information, see CVE-2014-5454.

Potential Impact: Users might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Visual AnalyticsLinux for x646.47.19.4 TS1M19.4 TS1M2
Microsoft® Windows® for x646.47.19.4 TS1M19.4 TS1M2
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.