Problem Note 69323: SAS® Business Data Network 3.3 does not validate the CreatedByUser and ModifiedByUser fields in the imported term XML file
 |  |  |  |  |
Severity: Low
Description: The SAS Business Data Network 3.3 does not validate the CreatedByUser and ModifiedByUser fields in the imported term XML file.
Potential Impact: A malicious user might fake the term attribute so that it appears as if it has been modified by someone else.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Business Data Network | Microsoft® Windows® for x64 | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 |
| 64-bit Enabled AIX | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 | ||
| 64-bit Enabled Solaris | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 | ||
| HP-UX IPF | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 | ||
| Linux for x64 | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 | ||
| Solaris for x64 | 3.3 | 3.4 | 9.4 TS1M6 | 9.4 TS1M8 | ||
A fix for this issue for SAS Business Data Network Mid-Tier 3.3 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/F9W.html#69323| Type: | Problem Note |
| Priority: | low |
| Date Modified: | 2022-06-30 11:01:48 |
| Date Created: | 2022-06-21 21:34:56 |