SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 65716: SAS® BI Dashboard contains a remote code-execution vulnerability

DetailsHotfixAboutRate It

Severity: High

Description: SAS BI Dashboard contains a remote code-execution vulnerability via de-serialization of AMF payload.

Potential Impact: An authenticated SAS® software user might execute system commands on the host server.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS BI DashboardSolaris for x644.4_M69.4 TS1M6
Linux for x644.4_M69.4 TS1M6
HP-UX IPF4.4_M69.4 TS1M6
64-bit Enabled Solaris4.4_M69.4 TS1M6
64-bit Enabled AIX4.4_M69.4 TS1M6
Microsoft® Windows® for x644.4_M69.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.