Severity: Medium

Description: SAS Environment Manager in SAS® 9.4M8 (TS1M8) and later contains an IDOR vulnerability.

Potential Impact: This vulnerability allows unauthorized access to SAS Environment Manager plug-ins.