3.2 Ensure Web Console is either secured or removed - 'java:/jaas/jmx-console = true'

Information

The Web Console application must be secured so it is accessible by trusted administrators only. If this condition is not met, the application must be removed (deleted) from deployment.

Solution

Remove the JBoss Web Console from deployment.

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|I

Plugin: Unix

Control ID: cfe6bd2b36506e01d2e9bc684c4230c45782db14051b361d09e8a8dd1242e09b