https://bugzilla.redhat.com/show_bug.cgi?id=1838332
--- Comment #2 from Ted (Jong Seok) Won <jwon(a)redhat.com> ---
Mitigation:
Users may configure the PersistenceManager with an appropriate value for
sessionAttributeValueClassNameFilter to ensure that only application provided
attributes are serialized and deserialized.
--
You are receiving this mail because:
You are on the CC list for the bug.