Petals ESB Container

The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security

Details

  • Type: Improvement Request Improvement Request
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 4.1.0
  • Fix Version/s: 4.2.0
  • Component/s: Administration
  • Security Level: Public
  • Description:
    Hide

    The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security. So if credentials of a Petals node is known, it's easy to be connected to other nodes of the topology.
    These sensible information MUST be more strongly protected.

    Show
    The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security. So if credentials of a Petals node is known, it's easy to be connected to other nodes of the topology. These sensible information MUST be more strongly protected.
  • Environment:
    -

Issue Links

Activity

Christophe DENEUX made changes - Tue, 30 Oct 2012 - 17:29:15 +0100
Field Original Value New Value
Status New [ 10000 ] Open [ 10002 ]
Priority Major [ 3 ]
Christophe DENEUX made changes - Tue, 30 Oct 2012 - 19:14:23 +0100
Link This issue blocks PETALSESBCLI-64 [ PETALSESBCLI-64 ]
Christophe DENEUX made changes - Wed, 31 Oct 2012 - 12:39:51 +0100
Status Open [ 10002 ] In Progress [ 10003 ]
Christophe DENEUX made changes - Wed, 31 Oct 2012 - 12:40:09 +0100
Status In Progress [ 10003 ] Resolved [ 10004 ]
Fix Version/s 4.2.0 [ 10356 ]
Resolution Fixed [ 1 ]

People

Dates

  • Created:
    Tue, 30 Oct 2012 - 17:20:19 +0100
    Updated:
    Wed, 31 Oct 2012 - 12:40:09 +0100
    Resolved:
    Wed, 31 Oct 2012 - 12:40:09 +0100