topic Re: CVE-2024-56337 and CVE-2024-50379 in Administration and Deployment

CVE-2024-56337 and CVE-2024-50379

ghassanzghaib — Tue, 14 Jan 2025 19:44:27 GMT

Hi,

Anyone aware if the Tomcats running the SAS 9.4 M8 software are exposed to the following vulnerabilities CVE-2024-56337 and CVE-2024-50379?

I checked the SAS securities bulletin and found no mention of the above vulnerabilities.

Thanks.

MargaretC — Tue, 14 Jan 2025 19:54:49 GMT

I see that the CVE-2024-50379 will be fixed with the Q1 2025 security fix.

ghassanzghaib — Tue, 14 Jan 2025 20:15:17 GMT

Thank you Margaret for your prompt reply.

kl2412 — Mon, 27 Jan 2025 15:38:45 GMT

Hello. There is a page where we can view when the Q1 2025 Security fix will be available or know when it will be out?

srini007svb — Sat, 15 Feb 2025 07:02:03 GMT

Any ETA on the Q1 20205 Hotfix Release.

Thanks in advance.

gothaggis — Wed, 30 Apr 2025 19:33:17 GMT

Is there any update on a fix for CVE-2024-50379? I also see vulns (regarding SAS version of Tomcat) for CVE-2024-54677 and CVE-2024-52316