Description
SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
References
- 106648 vdb-entry
- https://support.sas.com/kb/63/391.html
Unscored
CVE-2018-20732
EUVD-2018-13277GHSA-92hw-4jvj-v9ww
SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
Published Jan 17, 2019 · Updated Aug 5, 2024 · Assigned by mitre