[jboss-jira] [JBoss JIRA] (WFLY-2743) Some static references are stored to the ServiceRegistry that do not have permission checks

Stuart Douglas (JIRA) issues at jboss.org
Sat Jan 11 03:20:32 EST 2014


Stuart Douglas created WFLY-2743:
------------------------------------

             Summary: Some static references are stored to the ServiceRegistry that do not have permission checks
                 Key: WFLY-2743
                 URL: https://issues.jboss.org/browse/WFLY-2743
             Project: WildFly
          Issue Type: Bug
      Security Level: Public (Everyone can see)
            Reporter: Stuart Douglas


This enables a deployment to get access to the MSC ServiceRegistry, and from there change internal server state without any security manager checks. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list