[ 
https://issues.apache.org/jira/browse/ARIES-2123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Amichai Rothman resolved ARIES-2123.
------------------------------------
    Fix Version/s: rsa-2.0.0
       Resolution: Fixed

> TCP Provider allows invoking arbitrary methods on the service object
> --------------------------------------------------------------------
>
>                 Key: ARIES-2123
>                 URL: https://issues.apache.org/jira/browse/ARIES-2123
>             Project: Aries
>          Issue Type: Bug
>          Components: Remote Service Admin
>    Affects Versions: rsa-1.16.1
>            Reporter: Amichai Rothman
>            Priority: Major
>             Fix For: rsa-2.0.0
>
>
> The TCP Provider method invoker invokes any method on the service object. It 
> should restrict invocations only to methods that are declared in the exported 
> interfaces, and prevent invocation of other implementation/private methods 
> that are not explicitly exported.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to