[jboss-jira] [JBoss JIRA] (WFLY-2743) Some static references are stored to the ServiceRegistry that do not have permission checks
RH Bugzilla Integration (JIRA)
issues at jboss.org
Sat Jan 11 03:48:32 EST 2014
[ https://issues.jboss.org/browse/WFLY-2743?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
RH Bugzilla Integration updated WFLY-2743:
------------------------------------------
Bugzilla Update: Perform
Bugzilla References: https://bugzilla.redhat.com/show_bug.cgi?id=1051751
> Some static references are stored to the ServiceRegistry that do not have permission checks
> -------------------------------------------------------------------------------------------
>
> Key: WFLY-2743
> URL: https://issues.jboss.org/browse/WFLY-2743
> Project: WildFly
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Reporter: Stuart Douglas
>
> This enables a deployment to get access to the MSC ServiceRegistry, and from there change internal server state without any security manager checks.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list