Java Management Extensions (JMX) and Java Authentication and Authorization Service (JAAS) Security Mechanisms
JMX provides security controls for Java application monitoring interfaces through authentication and encryption protocols. When configuring remote JMX access, two primary security measures include credential verification and transport layer encryption.
1. Configuring Remote JMX Access
Enable JMX remote capabilities using JVM parameters:
-Dcom. ...
Posted on Sun, 20 Sep 2026 16:52:12 +0000 by cedricm
Analyzing the Apache Commons Collections LazyMap Deserialization Gadget Chain
Core Mechanism and Call Flow
The sixth widely recognized gadget chain in Apache Commons Collections exploits the interplay between LazyMap and TiedMapEntry to achieve arbitrary code execution during Java object deserialization. Unlike earlier implementations that rely on JDK-specific quirks or dynamic proxies, this path leverages standard colle ...
Posted on Mon, 20 Jul 2026 17:08:40 +0000 by tmharrison