SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 68637: SAS® Environment Manager contains a version of Apache Groovy affected by CVE-2020-17521

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Environment Manager contains Apache Groovy 2.5.1, which is known to be affected by the vulnerability described in CVE-2020-17521.

Potential Impact: Refer to the CVE record for further details.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Environment ManagerMicrosoft® Windows® for x642.5_M49.4 TS1M7
64-bit Enabled AIX2.5_M49.4 TS1M7
64-bit Enabled Solaris2.5_M49.4 TS1M7
HP-UX IPF2.5_M49.4 TS1M7
Linux for x642.5_M49.4 TS1M7
Solaris for x642.5_M49.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.