![]() | ![]() | ![]() | ![]() | ![]() |
Severity: High
Description: SAS BI Dashboard allows potentially unauthorized access to your server's file system via its image-attachment capability.
Potential Impact: A user might access files on the server that otherwise they should not be able to access.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Product Family | Product | System | Product Release | SAS Release | ||
Reported | Fixed* | Reported | Fixed* | |||
SAS System | SAS BI Dashboard | Microsoft® Windows® for x64 | 4.4_M6 | 9.4 TS1M6 | ||
64-bit Enabled AIX | 4.4_M6 | 9.4 TS1M6 | ||||
64-bit Enabled Solaris | 4.4_M6 | 9.4 TS1M6 | ||||
HP-UX IPF | 4.4_M6 | 9.4 TS1M6 | ||||
Linux for x64 | 4.4_M6 | 9.4 TS1M6 | ||||
Solaris for x64 | 4.4_M6 | 9.4 TS1M6 |