Class Log4JSocketServletTest

All Implemented Interfaces:
JaloSessionHolder

@IntegrationTest public class Log4JSocketServletTest extends ServicelayerBaseTest
This test class has been created to make sure there is no org.apache.log4j.net.SocketServer available on classpath. This class is known to have a vulnerability: CVE-2019-17571 https://nvd.nist.gov/vuln/detail/CVE-2019-17571
  • Constructor Details

    • Log4JSocketServletTest

      public Log4JSocketServletTest()
  • Method Details

    • shouldNotContainSocketServerInClasspath

      public void shouldNotContainSocketServerInClasspath()