CVE-2018-20732

CVE-2018-20732 affects SAS Web Infrastructure Platform prior to 9.4M6, where a Java deserialization variant allows remote code execution. The vulnerability impacts the platform’s deserialization handling, enabling arbitrary code execution by an authenticated or unauthenticated attacker over the n...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...