Wolf-Dieter Fink created AS7-5278: ------------------------------------- Summary: authentication succeed if the security-realm secret value only differ by additional characters (invalid base64) Key: AS7-5278 URL: https://issues.jboss.org/browse/AS7-5278 Project: Application Server 7 Issue Type: Bug Affects Versions: 7.1.2.Final (EAP) Reporter: Wolf-Dieter Fink A secured remoting connection can be still used if the secret contains a former valid value but append a character to an invalid base64 string. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira