67046 - SAS® Workflow Administrator is affected by the JQuery vulnerability that is described in CVE-2020-11022

Problem Note 67046: SAS® Workflow Administrator is affected by the JQuery vulnerability that is described in CVE-2020-11022

Severity: Medium

Description: SAS Workflow Administrator includes a version of JQuery that is affected by the vulnerability described in CVE-2020-11022.

Potential Impact: A user's web browser might execute untrustworthy code.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Workflow Administrator	Solaris for x64	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8
		Linux for x64	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8
		HP-UX IPF	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8
		64-bit Enabled Solaris	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8
		64-bit Enabled AIX	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8
		Microsoft® Windows® for x64	1.5	1.5_M2	9.4 TS1M6	9.4 TS1M8

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Workflow Administrator 1.5_M1 is available at:

A fix for this issue for SAS Workflow Administrator 1.5 is available at:

Type:	Problem Note
Priority:	high

Date Modified:	2023-02-14 11:11:49
Date Created:	2020-12-04 11:04:08