Problem Note 65733: SAS® BI Dashboard allows potentially unauthorized access to your server's file system
 |  |  |  |  |
Severity: High
Description: SAS BI Dashboard allows potentially unauthorized access to your server's file system via its image-attachment capability.
Potential Impact: A user might access files on the server that otherwise they should not be able to access.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS BI Dashboard | Microsoft® Windows® for x64 | 4.4_M6 | 9.4 TS1M6 | ||
| 64-bit Enabled AIX | 4.4_M6 | 9.4 TS1M6 | ||||
| 64-bit Enabled Solaris | 4.4_M6 | 9.4 TS1M6 | ||||
| HP-UX IPF | 4.4_M6 | 9.4 TS1M6 | ||||
| Linux for x64 | 4.4_M6 | 9.4 TS1M6 | ||||
| Solaris for x64 | 4.4_M6 | 9.4 TS1M6 | ||||
A fix for this issue for SAS BI Dashboard 4.4_M6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/H4L.html#65733| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2020-04-09 07:57:12 |
| Date Created: | 2020-03-24 12:45:35 |