70208 - The SAS® Logon Manager contains a denial-of-service vulnerability

Support

Submit a Problem
Update a Problem
Check Problem Status
SAS Administrators
Security Bulletins
License Assistance
Manage My Software Account
Downloads & Hot Fixes
Samples & SAS Notes

Problem Note 70208: The SAS® Logon Manager contains a denial-of-service vulnerability

Details

Hotfix

About

Rate It

Severity: Medium

Description: The SAS Logon Manager contains a denial-of-service (DoS) vulnerability.

Potential Impact: Users might not be able to log on to SAS web applications.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Web Infrastructure Platform	Microsoft® Windows® for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		64-bit Enabled AIX	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		64-bit Enabled Solaris	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		HP-UX IPF	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Linux for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Solaris for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Middle Tier 9.4_M7 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/J2L.html#70208

Type:	Problem Note
Priority:	medium

Date Modified:	2023-07-20 11:41:40
Date Created:	2023-06-23 00:34:39