[Geoserver-devel] [JIRA] (GEOS-8041) GWC Data Security Vulnerability

Simon Hofer created an issue

GeoServer / BugGEOS-8041

GWC Data Security Vulnerability

Issue Type:

BugBug

Affects Versions:

2.10.2, 2.11-RC1

Assignee:

Unassigned

Components:

GWC, Vulnerability

Created:

21/Mar/17 6:33 PM

Environment:

Ubuntu 14.04 / Jetty

Priority:

MediumMedium

Reporter:

Simon Hofer

It’s possible to request data a user has not be granted to. It violates the Statement in docs “It is only possible to request a tile within a bounding box that is fully accessible.”

I will provide further details per mail on request.

Add Comment

Add Comment

This message was sent by Atlassian JIRA (v1000.824.3#100035-sha1:74ec649)

Atlassian logo