]
Darran Lofthouse reassigned AS7-5278:
-------------------------------------
Assignee: Darran Lofthouse
authentication succeed if the security-realm secret value only differ
by additional characters (invalid base64)
---------------------------------------------------------------------------------------------------------------
Key: AS7-5278
URL:
https://issues.jboss.org/browse/AS7-5278
Project: Application Server 7
Issue Type: Bug
Affects Versions: 7.1.2.Final (EAP)
Reporter: Wolf-Dieter Fink
Assignee: Darran Lofthouse
A secured remoting connection can be still used if the secret contains a former valid
value but append a character to an invalid base64 string.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: