Abstract
Apache Log4j RCE Vulnerability
Installation and Upgrade
10.5 Fixed Limitations
10.5 Known Limitations
Cumulative Known Limitations
Emergency Bug Fixes Merged into Multidomain MDM 10.5

Release Notes

10.5

Back Next

Setting a System Property in JBoss EAP Environment 7.3

You must set a system property that prevents REST API authentication failures of business entity service requests, which do not contain required credentials due to truncated cookie values. Optionally, you can set this property for JBoss EAP 7.2 and 7.1.

Open the

standalone.conf

file located in the following directory:

On UNIX.

<JBoss installation directory>/bin/

On Windows.

<JBoss installation directory>\bin\

Set the following Java property:

-Dio.undertow.legacy.cookie.ALLOW_HTTP_SEPARATORS_IN_V0=true

(MDM-35074)

JBoss Environments

Download Guide