A vulnerability in the stateful session bean passivation mechanism allows a remote attacker with access to the remote EJB service to cause session state to be read from or written to files outside the intended passivation directory. This occurs because the on-disk file name is derived from a client-supplied identifier without proper validation. The issue is fixed in versions 10.3.0 and 11.0.0-M2.