62413 - The SAS® Forecast Studio client heap dump contains encoded passwords

Problem Note 62413: The SAS® Forecast Studio client heap dump contains encoded passwords

Severity: High

Description: The SAS Forecast Studio application stores sensitive information (for example, user passwords) in memory.

Potential Impact: Encoded passwords are visible within Java heap dumps.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Forecast Studio	Microsoft® Windows® for x64	13.2		9.4 TS1M2
		Microsoft Windows 8 Enterprise 32-bit	13.2		9.4 TS1M2
		Microsoft Windows 8 Enterprise x64	13.2		9.4 TS1M2
		Microsoft Windows 8 Pro 32-bit	13.2		9.4 TS1M2
		Microsoft Windows 8 Pro x64	13.2		9.4 TS1M2
		Microsoft Windows 8.1 Enterprise 32-bit	13.2		9.4 TS1M2
		Microsoft Windows 8.1 Enterprise x64	13.2		9.4 TS1M2
		Microsoft Windows 8.1 Pro 32-bit	13.2		9.4 TS1M2
		Microsoft Windows 8.1 Pro x64	13.2		9.4 TS1M2
		Microsoft Windows 10	13.2		9.4 TS1M2
		Microsoft Windows Server 2008	13.2		9.4 TS1M2
		Microsoft Windows Server 2008 R2	13.2		9.4 TS1M2
		Microsoft Windows Server 2008 for x64	13.2		9.4 TS1M2
		Microsoft Windows Server 2012 Datacenter	13.2		9.4 TS1M2
		Microsoft Windows Server 2012 R2 Datacenter	13.2		9.4 TS1M2
		Microsoft Windows Server 2012 R2 Std	13.2		9.4 TS1M2
		Microsoft Windows Server 2012 Std	13.2		9.4 TS1M2
		Windows 7 Enterprise 32 bit	13.2		9.4 TS1M2
		Windows 7 Enterprise x64	13.2		9.4 TS1M2
		Windows 7 Home Premium 32 bit	13.2		9.4 TS1M2
		Windows 7 Home Premium x64	13.2		9.4 TS1M2
		Windows 7 Professional 32 bit	13.2		9.4 TS1M2
		Windows 7 Professional x64	13.2		9.4 TS1M2
		Windows 7 Ultimate 32 bit	13.2		9.4 TS1M2
		Windows 7 Ultimate x64	13.2		9.4 TS1M2

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Forecast Server 14.3 is available at:

A fix for this issue for SAS Time Series Studio 14.3 is available at:

A fix for this issue for SAS Forecast Server 14.2 is available at:

A fix for this issue for SAS Time Series Studio 14.2 is available at:

Type:	Problem Note
Priority:	medium

Date Modified:	2018-08-15 13:26:48
Date Created:	2018-06-06 09:54:18