[ARIES-2123] TCP Provider allows invoking arbitrary methods on the service object

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: rsa-1.16.1
• Component/s: Remote Service Admin
• Assignee: Unassigned
• Reporter: Amichai Rothman
• Created: 18/Sep/23 08:21
• Updated: 18/Sep/23 08:21

Description

The TCP Provider method invoker invokes any method on the service object. It should restrict invocations only to methods that are declared in the exported interfaces, and prevent invocation of other implementation/private methods that are not explicitly exported.