Problem Note 69501: SAS® Anti-Money Laundering contains a privilege escalation vulnerability
 |  |  |  |  |
Severity: Medium
Description: SAS Anti-Money Laundering contains configuration issues where it allows non-administrator users who belong to the AML Database Access (cs_aml_db_access) group to modify audit trail database tables.
Potential Impact: Unauthorized users can add, edit, and delete records in the audit trail database tables.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Anti-Money Laundering | Linux for x64 | 8.3 | Viya | ||
An update for this issue is available for SAS Compliance Solutions 8.3. For instructions on how to access and apply these software updates, see the documentation links at the top of
https://tshf.sas.com/techsup/download/hotfix/HF2/ComplianceSol_83_home.html#69501| Type: | Problem Note |
| Priority: | medium |
| Date Modified: | 2023-06-21 12:36:17 |
| Date Created: | 2022-08-24 16:05:48 |