[QPID-7342] [Java Broker] ForbiddingAuthorisationFilter carelessly matches request paths - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: qpid-java-6.0.5, qpid-java-6.1
Component/s: Broker-J
Labels:
None

Description

The string matching within ForbiddingAuthorisationFilter is careless, allowing through more request paths than it intends.

Attachments

Activity

People

Assignee:: Lorenz Quack

Reporter:: Keith Wall

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 05/Jul/16 07:56

Updated:: 02/Oct/19 19:21

Resolved:: 07/Jul/16 08:07