[WFLY-2743] Some static references are stored to the ServiceRegistry that do not have permission checks - Red Hat Issue Tracker

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 8.0.0.Final
Affects Version/s: None
Component/s: None
Labels:

Git Pull Request:
https://github.com/wildfly/wildfly/pull/5702
Bugzilla References:
https://bugzilla.redhat.com/show_bug.cgi?id=1051751, https://bugzilla.redhat.com/show_bug.cgi?id=1052141, https://bugzilla.redhat.com/show_bug.cgi?id=1075479

This enables a deployment to get access to the MSC ServiceRegistry, and from there change internal server state without any security manager checks.

is duplicated by

WFLY-3567 Unchecked access to MSC Service Registry under JSM

Closed

Kabir Khan added a comment - 2017/12/06 11:40 AM

Bulk closing issues resolved against old releases

Kabir Khan added a comment - 2017/12/06 11:40 AM Bulk closing issues resolved against old releases

Assignee:: Stuart Douglas (Inactive)

Reporter:: Stuart Douglas (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2014/01/11 3:19 AM

Updated:: 2017/12/06 11:40 AM

Resolved:: 2014/01/21 3:15 AM