This vulnerability is fixed from JBossWS 3.3.1.GA
Reply to this message by going to Community
Start a new discussion in JBoss Web Services at Community