diff --git a/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql b/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql index eab6f1f7717..cf8e65c3bfb 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql @@ -59,7 +59,7 @@ class SafeFlow extends DataFlow::Configuration { .(FieldAccess) .getField() .hasQualifiedName("javax.management.remote.rmi", "RMIConnectorServer", - ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN", "SERIAL_FILTER_PATTERN"]) + ["CREDENTIAL_TYPES", "CREDENTIALS_FILTER_PATTERN"]) | put.getQualifier() = qualifier and put.getMethod().(MapMethod).getReceiverKeyType() instanceof TypeString and