SUPPORT / SAMPLES & SAS NOTES
Problem Note 69501: SAS® Anti-Money Laundering contains a privilege escalation vulnerability
 |  |  |  |  |
Severity: Medium
Description: SAS Anti-Money Laundering contains configuration issues where it allows non-administrator users who belong to the AML Database Access (cs_aml_db_access) group to modify audit trail database tables.
Potential Impact: Unauthorized users can add, edit, and delete records in the audit trail database tables.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Anti-Money Laundering | Linux for x64 | 8.3 | Viya | ||