SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 69116: A PostgreSQL JDBC driver critical vulnerability is identified in SAS® Anti-Money Laundering

DetailsHotfixAboutRate It

Severity: Critical

Description: SAS Anti-Money Laundering contains a PostgreSQL JDBC driver critical vulnerability. See CVE-2022-21724 for more details.

Potential Impact: An attacker might use the security vulnerability that was found in the JDBC driver for the PostgreSQL database to perform remote code execution.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Anti-Money LaunderingLinux for x648.2Viya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.