This whitepaper documents how to compromise CA ControlMinder versions 12.5, 12.6, and 12.6 SP1 running JBoss version 4.2.2.GA.
You can download it from the following link: https://packetstormsecurity.com/files/download/125305/Owning_A_CA_Control_Access_Server.pdf
Source: https://packetstormsecurity.com/files/125305/Owning-A-CA-Control-Access-Server.html