SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 67321: The Spring AMQP library that is included with SAS® Environment Manager is affected by the vulnerability that is described in CVE-2018-11087

DetailsHotfixAboutRate It

Severity: Medium

Description: The Spring AMQP library that is included with SAS Environment Manager is affected by the vulnerability that is described in CVE-2018-11087.

Potential Impact: An attacker might intercept and view data that passes over the network. 

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemSAS Release
ReportedFixed*
SAS SystemSAS Environment ManagerMicrosoft® Windows® for x649.4 TS1M69.4 TS1M7
64-bit Enabled AIX9.4 TS1M69.4 TS1M7
64-bit Enabled Solaris9.4 TS1M69.4 TS1M7
HP-UX IPF9.4 TS1M69.4 TS1M7
Linux for x649.4 TS1M69.4 TS1M7
Solaris for x649.4 TS1M69.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.