Problem Note 62955: SAS® Environment Manager contains vulnerable Apache Struts libraries
 |  |  |  |  |
Severity: High
Description: SAS Environment Manager contains Apache Struts libraries that have known vulnerabilities. Details about the vulnerabilities are available in the following CVE documents:
- CVE-2011-5057
- CVE-2012-0391
- CVE-2012-0392
- CVE-2012-0393
- CVE-2012-0394
- CVE-2012-1007
- CVE-2013-1965
- CVE-2013-1966
- CVE-2013-2134
- CVE-2013-2135
- CVE-2014-0094
- CVE-2014-0112
- CVE-2014-0113
- CVE-2014-0114
- CVE-2015-0899
- CVE-2015-5169
- CVE-2016-1181
- CVE-2016-1182
- CVE-2016-4003
Potential Impact: The impact varies. See the CVE details in the links listed above.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | SAS Environment Manager | Microsoft® Windows® for x64 | 9.4 TS1M0 | 9.4 TS1M6 |
| 64-bit Enabled AIX | 9.4 TS1M0 | 9.4 TS1M6 | ||
| 64-bit Enabled Solaris | 9.4 TS1M0 | 9.4 TS1M6 | ||
| HP-UX IPF | 9.4 TS1M0 | 9.4 TS1M6 | ||
| Linux for x64 | 9.4 TS1M0 | 9.4 TS1M6 | ||
| Solaris for x64 | 9.4 TS1M0 | 9.4 TS1M6 | ||
A fix for this issue for SAS Environment Manager 2.5_M2 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/B7R.html#62955A fix for this issue for SAS Environment Manager 2.5_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/A8X.html#62955A fix for this issue for SAS Environment Manager 2.5 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/V76.html#62955A fix for this issue for SAS Environment Manager 2.3 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/S45.html#62955A fix for this issue for SAS Web Server 9.4_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/S48.html#62955A fix for this issue for SAS Environment Manager 2.1_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/S44.html#62955| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2018-09-20 07:50:27 |
| Date Created: | 2018-09-19 13:38:06 |