Select Your Region
Americas
Europe
Middle East & Africa
Asia Pacific
SUPPORT / SAMPLES & SAS NOTES
Problem Note 65230: SAS® 9.4M6 Logon Manager does not impose size restrictions on the user-ID and password input fields
 |  |  |  |  |
Severity: Low
Description: SAS 9.4M6 Logon Manager does not impose size restrictions on the user-ID and password input fields.
Potential Impact: An attacker might attempt a Denial of Service attack by submitting arbitrarily large values on the logon page.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Viya | Linux for x64 | 3.5 | Viya | ||
| Microsoft® Windows® for x64 | 3.5 | Viya | ||||
| SAS System | SAS Web Infrastructure Platform | Solaris for x64 | 9.4_M6 | 9.4 TS1M6 | ||
| Linux for x64 | 9.4_M6 | 9.4 TS1M6 | ||||
| HP-UX IPF | 9.4_M6 | 9.4 TS1M6 | ||||
| 64-bit Enabled Solaris | 9.4_M6 | 9.4 TS1M6 | ||||
| 64-bit Enabled AIX | 9.4_M6 | 9.4 TS1M6 | ||||
| Microsoft® Windows® for x64 | 9.4_M6 | 9.4 TS1M6 | ||||