SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 67767: CAS contains a broken access-control vulnerability for table views

DetailsHotfixAboutRate It

Severity: High

Description: Access controls from SAS® Cloud Analytic Services (CAS) are bypassed on table views.

Potential Impact: This vulnerability potentially enables unauthorized users to access data.

Click the Hot Fix tab in this note to access the hot fix for this issue.

 



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS ViyaMicrosoft® Windows® for x643.53.5ViyaViya
Linux for x643.53.5ViyaViya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.