[jboss-jira] [JBoss JIRA] Updated: (GPD-278) Security issue allows arbitrary java code to be deployed and executed

Thomas Diesler (JIRA) jira-events at lists.jboss.org
Mon Dec 29 10:17:54 EST 2008


     [ https://jira.jboss.org/jira/browse/GPD-278?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Thomas Diesler updated GPD-278:
-------------------------------

    Fix Version/s: jBPM jPDL Designer 3.1.7
         Priority: Critical  (was: Major)


This is a critical issue that must get addressed in 3.1.7

> Security issue allows arbitrary java code to be deployed and executed
> ---------------------------------------------------------------------
>
>                 Key: GPD-278
>                 URL: https://jira.jboss.org/jira/browse/GPD-278
>             Project: JBoss jBPM GPD
>          Issue Type: Bug
>          Components: jpdl
>            Reporter: Thomas Diesler
>            Assignee: Koen Aers
>            Priority: Critical
>             Fix For: jBPM jPDL Designer 3.1.7
>
>
> The GPD circumvents the JBoss deployer architecture and hence allows arbitrary code to be executed on the AS

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list