Karaf security issue?

[Mark R Green]

We had a software team trying to use this but the OSVDB site shows a
security issue with Karaf.
http://osvdb.org/show/osvdb/119812

This does not appear to be fixed in 4.0.3?

Mark