[jboss-jira] [JBoss JIRA] Created: (JBAS-5657) JSP source code exposure in jmx-console

Mon Jun 23 12:06:38 EDT 2008

JSP source code exposure in jmx-console
---------------------------------------

                 Key: JBAS-5657
                 URL: http://jira.jboss.com/jira/browse/JBAS-5657
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: JMX/Web Console
    Affects Versions: JBossAS-4.2.2.GA
            Reporter: Clive Saldanha
         Assigned To: Darran Lofthouse
             Fix For: JBossAS-4.2.3.GA

The error page of the jmx-console spits out JSP source code. 

http://127.0.0.1:8080/jmx-console/DisplayOpResult

HTTP Status 500 -

type Exception report
message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception
org.apache.jasper.JasperException: An exception occurred processing JSP page /displayOpResult.jsp at line 12

9: </head>
10: <body>
11:
12: <jsp:useBean id='opResultInfo' type='org.jboss.jmx.adaptor.control.OpResultInfo' scope='request'/>
13:
14: <table width="100%">

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira