SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 67330: The SAS® Visual Analytics Transport Service contains a broken access control vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: The SAS Visual Analytics Transport Service contains a broken access control vulnerability. 

Potential Impact: Unauthenticated users can access internal SAS settings through a certain REST application programming interface (API) endpoint. 

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Visual AnalyticsMicrosoft® Windows® for x647.59.4 TS1M6
Linux for x647.59.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.