SAS® Fraud Management includes a version of Apache Ignite that contains a security vulnerability


Severity: Critical

Description: SAS Fraud Management includes a version of Apache Ignite that contains a security vulnerability.

Potential Impact: The Apache Ignite vulnerability allows the deserialization of untrusted data without ensuring that the resulting data will be valid. This vulnerability might result in the execution of arbitrary code on the Apache Ignite server side.