Petals ESB Container

The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security

Details

  • Type: Improvement Request Improvement Request
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 4.1.0
  • Fix Version/s: 4.2.0
  • Component/s: Administration
  • Security Level: Public
  • Description:
    Hide

    The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security. So if credentials of a Petals node is known, it's easy to be connected to other nodes of the topology.
    These sensible information MUST be more strongly protected.

    Show
    The JMX API PetalsAdminServiceMBean.retrieveTopology returns JMX credentials without dedicated security. So if credentials of a Petals node is known, it's easy to be connected to other nodes of the topology. These sensible information MUST be more strongly protected.
  • Environment:
    -

Issue Links

Depends
 

People

Dates

  • Created:
    Tue, 30 Oct 2012 - 17:20:19 +0100
    Updated:
    Wed, 31 Oct 2012 - 12:40:09 +0100
    Resolved:
    Wed, 31 Oct 2012 - 12:40:09 +0100
Atlassian JIRA (v4.1.2#531) | Report a problem | Request a feature | Contact administrators
Powered by a free Atlassian JIRA open source license for Petals ESB. Try JIRA - bug tracking software for your team.