SecurityClientFactory.getSecurityClient(String) allows artbitrary/user code to be run in a priviledged block ------------------------------------------------------------------------------------------------------------ Key: SECURITY-600 URL: https://issues.jboss.org/browse/SECURITY-600 Project: PicketBox (JBoss Security and Identity Management) Issue Type: Bug Security Level: Public (Everyone can see) Affects Versions: PicketBox_v4_0_beta4 Reporter: Carlo de Wolf Assignee: Anil Saldhana -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira