SUPPORT

Select Your Region

Visit the Cary, NC, US corporate headquarters site

Americas

Europe

Middle East & Africa

Asia Pacific

View our worldwide contacts list for help finding your region

Americas

Europe

Middle East & Africa

Asia Pacific

Sign In

Get access to My SAS, trials, communities and more.

Sign Out

Get access to My SAS, trials, communities and more.

SAS Sites

sas.com
Support
Blogs
Communities
Developer
Curiosity
Videos

Documentation

Learn
Brand
PartnerNet
Merchandise
SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 68804: SAS/SECURE® contains an RSA Crypto-J library with known vulnerabilities

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS/SECURE contains an RSA Crypto-J library that is known to be affected by the vulnerabilities described by these CVEs:

Potential Impact: These vulnerabilities are not exploitable in SAS software. However, the library might be flagged by a security scan. Refer to the CVE records listed in the previous section for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemSAS Release
ReportedFixed*
SAS SystemSAS/SECUREz/OS9.4 TS1M7
z/OS 64-bit9.4 TS1M7
Microsoft® Windows® for x649.4 TS1M7
Microsoft Windows 8 Enterprise 32-bit9.4 TS1M7
Microsoft Windows 8 Enterprise x649.4 TS1M7
Microsoft Windows 8 Pro 32-bit9.4 TS1M7
Microsoft Windows 8 Pro x649.4 TS1M7
Microsoft Windows 8.1 Enterprise 32-bit9.4 TS1M7
Microsoft Windows 8.1 Enterprise x649.4 TS1M7
Microsoft Windows 8.1 Pro 32-bit9.4 TS1M7
Microsoft Windows 8.1 Pro x649.4 TS1M7
Microsoft Windows 109.4 TS1M7
Microsoft Windows 119.4 TS1M7
Microsoft Windows Server 20089.4 TS1M7
Microsoft Windows Server 2008 R29.4 TS1M7
Microsoft Windows Server 2008 for x649.4 TS1M7
Microsoft Windows Server 2012 Datacenter9.4 TS1M7
Microsoft Windows Server 2012 R2 Datacenter9.4 TS1M7
Microsoft Windows Server 2012 R2 Std9.4 TS1M7
Microsoft Windows Server 2012 Std9.4 TS1M7
Microsoft Windows Server 20169.4 TS1M7
Microsoft Windows Server 20199.4 TS1M7
Microsoft Windows Server 20229.4 TS1M7
Windows 7 Enterprise 32 bit9.4 TS1M7
Windows 7 Enterprise x649.4 TS1M7
Windows 7 Home Premium 32 bit9.4 TS1M7
Windows 7 Home Premium x649.4 TS1M7
Windows 7 Professional 32 bit9.4 TS1M7
Windows 7 Professional x649.4 TS1M7
Windows 7 Ultimate 32 bit9.4 TS1M7
Windows 7 Ultimate x649.4 TS1M7
64-bit Enabled AIX9.4 TS1M7
64-bit Enabled Solaris9.4 TS1M7
HP-UX IPF9.4 TS1M7
Linux for x649.4 TS1M7
Solaris for x649.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.