topic Re: Need SAS 9.4/FM 5.5 Struts Version? in Administration and Deployment

Need SAS 9.4/FM 5.5 Struts Version?

AdamBre — Sun, 01 Apr 2018 17:46:18 GMT

Hello!

We've recently deployed SAS 9.4 with the Financial Management components (version 5.5). We are at TS1M5 as of today and looking to see what version of Apache Struts we have.

I've followed some google-foo and the struts-core.jar files shows something of a 1.x specification but I feel that's awfully low. This is a security concern of ours (sound familiar?) so we're looking for something that's identifiable at this maintenance level.

Again - just looking for the struts version that SAS is at with 9.4 TS1M5 by default. We have very little customization. Please also know I'm not a SAS person but an infrastructure person helping search this out.

For further clarity, we use the VA Hub to launch documentation within Excel and use the add-in to upload. We also use FM Studio, Data Integration, and a few other things (The Financial Management web portal too). I believe these all uses the Apache services their core.

Thanks in advance,

Adam

Edit: Further clarification of what we have.

Re: Need SAS 9.4/FM 5.5 Struts Version?

JuanS_OCS — Mon, 02 Apr 2018 12:13:38 GMT

Hello @AdamBre,

I think your question should be answered by a SAS developer, hence, SAS Technical Support should be, probably, your best way to address it.

As previous Java developer (not at SAS 🙂 ), I can tell you that you can always search for the struts-config.xml in your web application and check the version actually used by the application. Or in the MANIFEST file, inside the META-INF folder.

An example:

https://stackoverflow.com/questions/4021995/how-to-find-the-struts-version-being-used-in-a-project

Re: Need SAS 9.4/FM 5.5 Struts Version?

alexal — Mon, 02 Apr 2018 19:40:47 GMT

@AdamBre,

SAS is using the custom version of Apache Struts.

Re: Need SAS 9.4/FM 5.5 Struts Version?

JuanS_OCS — Mon, 02 Apr 2018 15:56:53 GMT

@alexal,

I feel curious, do you have details about custom version of Strut 2? What aspects have been customized?

Re: Need SAS 9.4/FM 5.5 Struts Version?

alexal — Mon, 02 Apr 2018 18:32:36 GMT

@JuanS_OCS,

I do not have such information.

Re: Need SAS 9.4/FM 5.5 Struts Version?

alexal — Mon, 02 Apr 2018 19:41:33 GMT

@JuanS_OCS,

I've corrected my original statement about the version number.