PT-2024-33194 · Sas · Sas Studio

Published 2024-10-30 · Updated 2024-11-04 · CVE-2024-48734

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAS Studio version 9.4

Description The issue concerns an unrestricted file upload in the /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} endpoint, allowing a remote attacker to upload malicious files. This is disputed by the vendor as file upload is intended for authorized users.

Recommendations For SAS Studio version 9.4, consider restricting access to the /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} endpoint to prevent unauthorized file uploads. As a temporary workaround, restrict file upload capabilities to only authorized users until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-48734

Affected Products

Sas Studio

References · 5

• 🔥❌ https://github.com/ACN-CVEs/CVE-2024-48734/blob/d59cca7b03bce3a516035d1a0f488d67c3d10ae6/Unrestricted%20file%20upload.pdf · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2024-48734 · Security Note
• https://t.me/cvedetector/9468 · Telegram Post
• http://sas.com · Note
• https://twitter.com/VulmonFeeds/status/1851781067557990758 · Twitter Post