[
https://jira.jboss.org/jira/browse/SECURITY-267?page=com.atlassian.jira.p...
]
Darran Lofthouse updated SECURITY-267:
--------------------------------------
Fix Version/s: Negotiation_2.0.4.GA
(was: Negotiation_2.0.3.GA)
The MIC that may need verification is the MechListMIC in the SPNEGO messages, however
testing with IE reveals that this is not being sent anyway - will re-visit if and when a
client that sends this MIC is identified.
Review any MIC verification is being performed as required.
-----------------------------------------------------------
Key: SECURITY-267
URL:
https://jira.jboss.org/jira/browse/SECURITY-267
Project: JBoss Security and Identity Management
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: Negotiation_2.0.4.GA
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira