I'm a lier, with this vuln, you won't be able to deploy a war =) That said, you still can use ARCH_JAVA but with native platforms 'win' and 'linux', so just jsp webshell are used.