SUPPORT

Select Your Region

Visit the Cary, NC, US corporate headquarters site

Americas

Europe

Middle East & Africa

Asia Pacific

View our worldwide contacts list for help finding your region

Americas

Europe

Middle East & Africa

Asia Pacific

Sign In

Get access to My SAS, trials, communities and more.

Sign Out

Get access to My SAS, trials, communities and more.

SAS Sites

sas.com
Support
Blogs
Communities
Developer
Curiosity
Videos

Documentation

Learn
Brand
PartnerNet
Merchandise
SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 62681: SAS® Studio contains an arbitrary file-path vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: The web application might allow unauthorized access to files on the web application server.

Potential Impact: Users can gain access to files for which they do not have authorization.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS StudioMicrosoft® Windows® for x643.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8 Enterprise 32-bit3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8 Enterprise x643.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8 Pro 32-bit3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8 Pro x643.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8.1 Enterprise 32-bit3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8.1 Enterprise x643.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8.1 Pro 32-bit3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 8.1 Pro x643.713.89.4 TS1M59.4 TS1M6
Microsoft Windows 103.713.89.4 TS1M59.4 TS1M6
Microsoft Windows Server 2012 Datacenter3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows Server 2012 R2 Datacenter3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows Server 2012 R2 Std3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows Server 2012 Std3.713.89.4 TS1M59.4 TS1M6
Microsoft Windows Server 20163.713.89.4 TS1M59.4 TS1M6
Windows 7 Enterprise 32 bit3.713.89.4 TS1M59.4 TS1M6
Windows 7 Enterprise x643.713.89.4 TS1M59.4 TS1M6
Windows 7 Home Premium 32 bit3.713.89.4 TS1M59.4 TS1M6
Windows 7 Home Premium x643.713.89.4 TS1M59.4 TS1M6
Windows 7 Professional 32 bit3.713.89.4 TS1M59.4 TS1M6
Windows 7 Professional x643.713.89.4 TS1M59.4 TS1M6
Windows 7 Ultimate 32 bit3.713.89.4 TS1M59.4 TS1M6
Windows 7 Ultimate x643.713.89.4 TS1M59.4 TS1M6
64-bit Enabled AIX3.713.89.4 TS1M59.4 TS1M6
64-bit Enabled Solaris3.713.89.4 TS1M59.4 TS1M6
HP-UX IPF3.713.89.4 TS1M59.4 TS1M6
Linux for x643.713.89.4 TS1M59.4 TS1M6
Solaris for x643.713.89.4 TS1M59.4 TS1M6
SAS SystemSAS Studio for ViyaLinux for x644.44.4ViyaViya
Microsoft® Windows® for x644.44.4ViyaViya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.