Class Log4JSocketServletTest

  • All Implemented Interfaces:
    JaloSessionHolder

    @IntegrationTest
    public class Log4JSocketServletTest
    extends ServicelayerBaseTest
    This test class has been created to make sure there is no org.apache.log4j.net.SocketServer available on classpath. This class is known to have a vulnerability: CVE-2019-17571 https://nvd.nist.gov/vuln/detail/CVE-2019-17571
    • Constructor Detail

      • Log4JSocketServletTest

        public Log4JSocketServletTest()
    • Method Detail

      • shouldNotContainSocketServerInClasspath

        public void shouldNotContainSocketServerInClasspath()