[
https://issues.apache.org/jira/browse/CASSANDRA-9085?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15025271#comment-15025271
]
T Jake Luciani commented on CASSANDRA-9085:
-------------------------------------------
[~brianhks] C* no longer uses phantom references to clean up CASSANDRA-2521 so
forced GC does nothing there. Secondly in production you shouldn't be running
with local JMX anyway
> Bind JMX to localhost unless explicitly configured otherwise
> ------------------------------------------------------------
>
> Key: CASSANDRA-9085
> URL: https://issues.apache.org/jira/browse/CASSANDRA-9085
> Project: Cassandra
> Issue Type: Bug
> Components: Configuration, Observability
> Reporter: T Jake Luciani
> Assignee: T Jake Luciani
> Priority: Critical
> Fix For: 2.0.14, 2.1.4
>
>
> Cassandra's default JMX config can lead to someone executing arbitrary code:
> see http://www.mail-archive.com/[email protected]/msg41819.html
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
