JNLP launchers provide remote code execution by design. Since the JNLP itself is unsigned, code signing does not protect against RCE when there exists any class which can be used as a trampoline. Mirth contains many (rhino, being one of them).
Since no validation of the server certificate is performed, an attacker may act as a man-in-the-middle to present a modified JNLP using validly signed JAR's to undetectably take over the client, or to intercept the server credentials and take over the server.
Add certificate validation of the server TLS certificate to ensure confidentiality of credentials, and authenticity of the downloaded software.
Related: OpenIntegrationEngine/engine#280
JNLP launchers provide remote code execution by design. Since the JNLP itself is unsigned, code signing does not protect against RCE when there exists any class which can be used as a trampoline. Mirth contains many (rhino, being one of them).
Since no validation of the server certificate is performed, an attacker may act as a man-in-the-middle to present a modified JNLP using validly signed JAR's to undetectably take over the client, or to intercept the server credentials and take over the server.
Add certificate validation of the server TLS certificate to ensure confidentiality of credentials, and authenticity of the downloaded software.
Related: OpenIntegrationEngine/engine#280