Java Package Collection Mode And Collection Mode Override Properties Should Be Disabled

< 1 min read

Impact Area

Security

Severity

High

Affected Element

System property

Rule ID #

SN-0190

Impact #

The “Collection Mode” property allows for the direct calling of new Java packages that have not been called before. Once enabled, this plugin manages the relationship between the server side code and Collection mode property to enforce security restrictions.

Remediation #

It is recommended to set this property “glide.whitelist.manager.collection_mode.override” to false to close the security gap that exists when importing Java package calls into an instance.