Uploaded image for project: 'Jackrabbit Content Repository'
  1. Jackrabbit Content Repository
  2. JCR-4960

Disable RMI by default

    XMLWordPrintableJSON

Details

    Description

      Because it's inherently prone to security issues, RMI should be disabled by default. The documentation needs to be updated to reflect that and to explain how to enable it again.

      Attachments

        1. jcr-4960.patch
          5 kB
          Manfred Baedke

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. JCR-4949 get rid of beanutils dependency

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. JCR-4973 jackrabbit-jcr-rmi: deprecate RMI support

          • Major - Major loss of function.
          • Closed
          links to

          Web Link https://www.cve.org/CVERecord?id=CVE-2023-37895

          Activity

            People

              baedke Manfred Baedke
              baedke Manfred Baedke
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: