[jboss-jira] [JBoss JIRA] (AS7-5278) authentication succeed if the security-realm secret value only differ by additional characters (invalid base64)
[
https://issues.jboss.org/browse/AS7-5278?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse resolved AS7-5278.
-----------------------------------
Fix Version/s: 7.1.3.Final (EAP)
Resolution: Rejected
The additional character is invalid and is being dropped by the Base64 conversion back to
plain text.
authentication succeed if the security-realm secret value only differ
by additional characters (invalid base64)
---------------------------------------------------------------------------------------------------------------
Key: AS7-5278
URL: https://issues.jboss.org/browse/AS7-5278
Project: Application Server 7
Issue Type: Bug
Affects Versions: 7.1.2.Final (EAP)
Reporter: Wolf-Dieter Fink
Assignee: Darran Lofthouse
Fix For: 7.1.3.Final (EAP)
A secured remoting connection can be still used if the secret contains a former valid
value but append a character to an invalid base64 string.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira