Severity: Medium

Description: In SAS^® Marketing Automation, the Digital Marketing Integration tab in the Business Context settings contains fields for entering the credentials and a URL that enable you to connect to SAS^® Customer Intelligence 360. Instead, you can enter any URL in the URL field.  

Potential Impact: It is possible that users can connect from SAS Marketing Automation to another URL other than that for SAS Customer Intelligence 360. As a result, users can access a URL and server that they should not be able to access.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Note: This hot fix introduces the following new Java argument:

This argument enables you to set Java virtual machine (JVM) flag to remove the Digital Marketing Integration tab from the Business Context settings. This flag impacts all the business contexts on the server, and you should set it for all SASserver6 servers. 

You need to add the new argument either to the wrapper.conf file or the setenv.sh file, dependent on you operating environment.

Microsoft Windows operating environments (wrapper.conf):

The wrapper.conf file is available in the SAS-configuration-directory\Lev1\Web\WebAppServer\SASServer6_1\conf directory. In wrapper.conf, add the argument as shown below:

Note: In the wrapper.java.additional.XX property, XX specifies the next number in the sequence that already exists in the file. Modify XX to be the next number in that sequence.

In Linux and UNIX operating environments (setenv.sh):

The setenv.sh file is located in the SAS-configuration-directory/Lev1/Web/WebAppServer/SASServer6_1/bin directory.

Add the argument to the JAVA_OPTS= property, as shown below:

Operating System and Release Information

A fix for this issue for SAS Marketing Automation 6.6 is available at: