Solved: Java method security exception.A security exception occurred while invoking Java method on a “”java.lang.Class”” object. MethodName is getName. Possible cause: Either the createobject function and cfobject tag are disabled in the security sandbox or you are trying to create a class in the ColdFusion package and that is disabled.

I was getting this error in the exception log:

“Error”,”ajp-bio-8012-exec-37″,”04/12/13″,”11:51:15″,”mgtemplate”,”Java method security exception.A security exception occurred while invoking Java method on a “”java.lang.Class”” object. MethodName is getName. Possible cause: Either the createobject function and cfobject tag are disabled in the security sandbox or you are trying to create a class in the ColdFusion package and that is disabled. The specific sequence of files included or processed is: C:\inetpub\mgtemplate\RemotingService.cfc, line: 1 ”
coldfusion.runtime.StructBean$SecurityException: Java method security exception.
at coldfusion.runtime.StructBean.checkPermission(StructBean.java:96)
at coldfusion.runtime.StructBean.invoke(StructBean.java:482)
at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2465)
at Statement870.evaluate(:1)
at coldfusion.runtime.CFPage.evaluateCondition(CFPage.java:9340)
at cfAbstractRemotingService2ecfc1188850940$funcRESETCFHTMLHEAD.runFunction(C:\inetpub\ModelGlue\gesture\remoting\AbstractRemotingService.cfc:59)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)
at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)
at coldfusion.runtime.CfJspPage._invokeUDF(CfJspPage.java:2659)
at cfAbstractRemotingService2ecfc1188850940$funcEXECUTEEVENT.runFunction(C:\inetpub\ModelGlue\gesture\remoting\AbstractRemotingService.cfc:40)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)
at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:220)
at coldfusion.runtime.CfJspPage._invokeUDF(CfJspPage.java:2659)
at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2455)
at cfRemotingService2ecfc1182307450$funcEXECUTEEVENT.runFunction(C:\inetpub\mgtemplate\RemotingService.cfc:17)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:472)
at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:405)
at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:368)
at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:55)
at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:321)
at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:518)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:660)
at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:469)
at coldfusion.filter.ComponentFilter.invoke(ComponentFilter.java:193)
at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:436)
at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48)
at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
at coldfusion.filter.PathFilter.invoke(PathFilter.java:112)
at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94)
at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46)
at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
at coldfusion.xml.rpc.CFCServlet.invoke(CFCServlet.java:155)
at coldfusion.xml.rpc.CFCServlet.doPost(CFCServlet.java:331)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42)
at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:224)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:928)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:414)
at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:204)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:539)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:298)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)

I was also watching the server and saw that coldfusion.exe was attempting these file touches per procmon.exe:

11:08:40.3218412 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3223507 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\axis2\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3224855 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\gateway\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3226892 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\cfform\jars\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3228584 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\flex\jars\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3229917 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3231216 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\bin\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3232705 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3234821 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3236827 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\classes\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3239420 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3241352 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3243784 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3246013 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en_US.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3248251 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3252732 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\axis2\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3254280 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\gateway\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3256051 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\cfform\jars\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3257616 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\flex\jars\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3259245 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3260489 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\bin\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3261651 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3262954 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3265052 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\wwwroot\WEB-INF\classes\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3266873 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3268189 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3270259 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\lib\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
11:08:40.3271909 AM coldfusion.exe 2864 CreateFile C:\ColdFusion10\cfusion\lib\oosdk\classes\coldfusion\runtime\StructBean.SecurityException_en.properties PATH NOT FOUND Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

I compared ColdFusion versions, settings, JVM configs and settings and versions. I was at a loss. It turns out, within the ColdFusion Administrator the check box for the below was checked:
Disable access to internal ColdFusion Java components
Disables the ability for CFML code to access and create Java objects that are part of the internal ColdFusion implementation. This prevents an unauthenticated CFML template from reading or modifying administration and configuration information for this server.

disableAccessToInternalColdFusionJavaComponentsCheckbox

Once I unchecked this and saved my settings, the section on the site worked.


Posted

in

by

Tags:

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *