![]() | ![]() | ![]() | ![]() | ![]() |
Severity: Critical
Description: The ability to use OAuth authentication to connect to Google BigQuery is done through the use of the REFRESH_TOKEN=, CLIENT_ID= and CLIENT_SECRET= LIBNAME and CASLIB options. The settings for these options might be displayed in the SAS® log.
Potential Impact: A user's logon credentials might be exposed in clear text.
Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.
Product Family | Product | System | Product Release | SAS Release | ||
Reported | Fixed* | Reported | Fixed* | |||
SAS System | SAS/ACCESS Interface to Google BigQuery | Linux for x64 | 9.41 | 9.43 | 9.4 TS1M6 | 9.4 TS1M8 |
SAS System | SAS/ACCESS Interface to Google BigQuery (on SAS Viya) | Linux for x64 | V.03.05 | 2021.1.1 | Viya | Viya |
SAS System | SAS Data Connector to Google BigQuery | Linux for x64 | V.03.05 | 2020.1.5 | Viya | Viya |