Update InsecureRmiJmxEnvironmentConfiguration.ql

timoles · web-flow · commit 8daa398af62e · 2021-06-25T16:12:37.000+02:00
diff --git a/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql b/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql
@@ -60,7 +60,7 @@ class SafeFlow extends DataFlow::Configuration {
           .(FieldAccess)
           .getField()
           .hasQualifiedName("javax.management.remote.rmi", "RMIConnectorServer",
-            ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN", "SERIAL_FILTER_PATTERN"])
+            ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN"])
     |
       put.getQualifier() = qualifier and
       put.getMethod().(MapMethod).getReceiverKeyType() instanceof TypeString and

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ class SafeFlow extends DataFlow::Configuration {`
`60`	`60`	`.(FieldAccess)`
`61`	`61`	`.getField()`
`62`	`62`	`.hasQualifiedName("javax.management.remote.rmi", "RMIConnectorServer",`
`63`		`- ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN", "SERIAL_FILTER_PATTERN"])`
	`63`	`+ ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN"])`
`64`	`64`	`\|`
`65`	`65`	`put.getQualifier() = qualifier and`
`66`	`66`	`put.getMethod().(MapMethod).getReceiverKeyType() instanceof TypeString and`