70554 - SAS® Environment Manager contains a version of activemq-client that is known to be affected by CVE-2023-46604

Problem Note 70554: SAS® Environment Manager contains a version of activemq-client that is known to be affected by CVE-2023-46604

Severity: Critical

Description: SAS Environment Manager contains a version of activemq-client that is known to be affected by CVE-2023-46604

Potential Impact: The vulnerability described in CVE-2023-46604 might allow Remote Code Execution. Refer to the CVE record for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Environment Manager 2.5_M5 is available at:

A fix for this issue for SAS Environment Manager 2.5_M4 is available at:

A fix for this issue for SAS Environment Manager 2.5_M3 is available at:

Type:	Problem Note
Priority:	high

Date Modified:	2023-12-14 11:53:09
Date Created:	2023-12-04 09:43:07