SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 70227: SAS® Risk Governance Framework contains a forced browsing vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Risk Governance Framework contains a forced browsing vulnerability.

Potential Impact: A user without administrative capabilities might be able to access screen definitions.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Risk Governance FrameworkLinux for x647.49.4 TS1M5
Windows 7 Ultimate x647.49.4 TS1M5
Windows 7 Ultimate 32 bit7.49.4 TS1M5
Windows 7 Professional x647.49.4 TS1M5
Windows 7 Professional 32 bit7.49.4 TS1M5
Windows 7 Home Premium x647.49.4 TS1M5
Windows 7 Home Premium 32 bit7.49.4 TS1M5
Windows 7 Enterprise x647.49.4 TS1M5
Windows 7 Enterprise 32 bit7.49.4 TS1M5
Microsoft Windows Server 20167.49.4 TS1M5
Microsoft Windows Server 2012 Std7.49.4 TS1M5
Microsoft Windows Server 2012 R2 Std7.49.4 TS1M5
Microsoft Windows Server 2012 R2 Datacenter7.49.4 TS1M5
Microsoft Windows Server 2012 Datacenter7.49.4 TS1M5
Microsoft Windows Server 2008 for x647.49.4 TS1M5
Microsoft Windows Server 2008 R27.49.4 TS1M5
Microsoft Windows Server 20087.49.4 TS1M5
Microsoft Windows 107.49.4 TS1M5
Microsoft Windows 8.1 Pro x647.49.4 TS1M5
Microsoft Windows 8.1 Pro 32-bit7.49.4 TS1M5
Microsoft Windows 8.1 Enterprise x647.49.4 TS1M5
Microsoft Windows 8.1 Enterprise 32-bit7.49.4 TS1M5
Microsoft Windows 8 Pro x647.49.4 TS1M5
Microsoft Windows 8 Pro 32-bit7.49.4 TS1M5
Microsoft Windows 8 Enterprise x647.49.4 TS1M5
Microsoft Windows 8 Enterprise 32-bit7.49.4 TS1M5
Microsoft® Windows® for x647.49.4 TS1M5
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.