Are there any security problems with webMathematica?

A potential security problem exists in webMathematica 1.0.0 and 1.0.0.1. The problem can allow read access to files on the computer on which webMathematica is running.

Solution

Replace your MSP servlet with a new one available from http://support.wolfram.com/allplatforms/MSP.class. The new servlet can be installed as described below:

Installation

The MSP.class file is typically found inside the webMathematica web application in the WEB-INF/classes directory. On Windows a typical location would be:

C:\Program Files\Apache Tomcat 4.0\webapps\webMathematica\WEB-INF\classes

/usr/local/tomcat/webapps/webMathematica/WEB-INF/classes

After installing the new MSP.class you should restart your server.

Questions or comments? Send email to support@wolfram.com.