[jboss-jira] [JBoss JIRA] (AS7-5220) tmp/auth/ challenge files are not deleted when access is via JMX client

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/AS7-5220?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse moved JBPAPP-9528 to AS7-5220:
-----------------------------------------------

              Project: Application Server 7  (was: JBoss Enterprise Application Platform)
                  Key: AS7-5220  (was: JBPAPP-9528)
             Workflow: GIT Pull Request workflow   (was: jira)
    Affects Version/s: 7.1.2.Final (EAP)
                           (was: EAP 6.0.0 (CR1))
          Component/s: Domain Management
                       Security
                           (was: Security)
             Security:     (was: Public)
       Docs QE Status:   (was: NEW)

    
> tmp/auth/ challenge files are not deleted when access is via JMX client
> -----------------------------------------------------------------------
>
>                 Key: AS7-5220
>                 URL: https://issues.jboss.org/browse/AS7-5220
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: Domain Management, Security
>    Affects Versions: 7.1.2.Final (EAP)
>            Reporter: Tom Fonteyne
>            Assignee: Darran Lofthouse
>
> the authentication process that creates temporary files in tmp/auth is not deleting them when a JMX client connects.
> At an extreme, this would be a DOS attack, as the disk could fill up.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira