Amichai Rothman created ARIES-2123:
--------------------------------------

             Summary: TCP Provider allows invoking arbitrary methods on the 
service object
                 Key: ARIES-2123
                 URL: https://issues.apache.org/jira/browse/ARIES-2123
             Project: Aries
          Issue Type: Bug
          Components: Remote Service Admin
    Affects Versions: rsa-1.16.1
            Reporter: Amichai Rothman


The TCP Provider method invoker invokes any method on the service object. It 
should restrict invocations only to methods that are declared in the exported 
interfaces, and prevent invocation of other implementation/private methods that 
are not explicitly exported.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to