[ 
https://issues.apache.org/jira/browse/QPID-1563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Aidan Skinner reassigned QPID-1563:
-----------------------------------

    Assignee: Rob Godfrey  (was: Aidan Skinner)

Please review

> AMQUserManagementMBean contains filesystem race condition
> ---------------------------------------------------------
>
>                 Key: QPID-1563
>                 URL: https://issues.apache.org/jira/browse/QPID-1563
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>            Reporter: Aidan Skinner
>            Assignee: Rob Godfrey
>
> saveAccessFile contains a classic temp file race condition which would 
> concievably let a user with write permission to the configuration directory 
> write or delete arbitary files as the broker by creating a symlink.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to