CVE-2014-5454

Name of the Vulnerable Software and Affected Versions SAS Visual Analytics version 6.4M1

Description The issue concerns an unrestricted file upload vulnerability in the image upload module. This allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and then accessing it.

Recommendations For SAS Visual Analytics version 6.4M1, consider restricting access to the image upload module until a fix is available, and avoid uploading files with executable extensions to minimize the risk of exploitation.