Verified for JBoss EAP 6.3.3.CR1.
Ivo Studensky <istudens> updated the status of jira SECURITY-868 to Reopened