Skip to main content
Version: 25.3.0

RASP Java Agent Release Notes (25.3.0)

Overview​

  • This release includes improved compatibility for the XXE ARMR rule with JBoss AS versions 5 and 6.

New Features / Improvements​

  • none

New Features / Improvements Which Break Backward Compatibility​

  • none

Feature Removals​

  • none

Bug Fixes​

  • W4J-1685 Improved compatibility for XXE ARMR rule with JBoss AS versions 5 and 6

Known Issues​

  • W4J-252 Additional filesystem read events are generated for certain Application and JDK folders the first time an ARMR filesystem rule that contains the api() directive triggers
  • W4J-435 ARMR Socket input specifier not working on some Java6 JDK
  • W4J-1431 ARMR HTTP CSRF rule is not working correctly on in JSP page on Tomcat 10, 11 and JBossEAP8
  • W4J-1432 ARMR HTTP XSS rule is not working correctly on JBoss EAP 8 and Wildfly 32
  • W4J-1454 RMI Client/Server connection fails with java.rmi.NoSuchObjectException on JRockit Java6 Windows unless DisableModules=DNS
  • W4J-1477 ARMR Patch for CVE-2016-5552 disables input() specifier on DNS/Socket rules on Windows
  • REM-2445 Inconsistent warning messages logged when user inadvertently omits -Dcom.waratek.log.file property depending on whether log.mode is LOCAL or is BOTH

Third Party / Open Source Dependencies​

  • ANTLR
  • Log4j (version1) Library
  • ASM Library
  • OpenJDK JDK Source
  • JASYPT