[infinispan-issues] [JBoss JIRA] (ISPN-6615) Scritping manager exposes unwrapped scripting cache

Vojtech Juranek (JIRA) issues at jboss.org
Tue May 10 04:16:00 EDT 2016


     [ https://issues.jboss.org/browse/ISPN-6615?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vojtech Juranek updated ISPN-6615:
----------------------------------
              Status: Pull Request Sent  (was: Open)
    Git Pull Request: https://github.com/infinispan/infinispan/pull/4325


> Scritping manager exposes unwrapped scripting cache
> ---------------------------------------------------
>
>                 Key: ISPN-6615
>                 URL: https://issues.jboss.org/browse/ISPN-6615
>             Project: Infinispan
>          Issue Type: Bug
>          Components: Security, Tasks
>            Reporter: Vojtech Juranek
>            Assignee: Vojtech Juranek
>
> [Fix for ISPN-6210|https://github.com/infinispan/infinispan/commit/1d2891ae6913179fe3e824df2d2e78ac99ddba39] exposes unwrapped scripting cache, which allows any user who is able to get reference to an instance of {{ScriptingManager}} to upload and delete scripts, no matter which role he has assigned.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the infinispan-issues mailing list