[jboss-jira] [JBoss JIRA] (AS7-5278) authentication succeed if the security-realm secret value only differ by additional characters (invalid base64)

[Wolf-Dieter Fink (JIRA)]

Wolf-Dieter Fink created AS7-5278:
-------------------------------------

             Summary: authentication succeed if the security-realm secret value only differ by additional characters (invalid base64)
                 Key: AS7-5278
                 URL: https://issues.jboss.org/browse/AS7-5278
             Project: Application Server 7
          Issue Type: Bug
    Affects Versions: 7.1.2.Final (EAP)
            Reporter: Wolf-Dieter Fink


A secured remoting connection can be still used if the secret contains a former valid value but append a character to an invalid base64 string.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira