1.19 - Remove, rename, or comment out the default user accounts from production servers - 'jmx-console-users.properties - admin'

Information

Remove, rename, or comment out the default user accounts defined in .properties files and login-config.xml

Solution

Remove, rename, or comment out the default user accounts in the default <application-policy> elements located within the configuration file: JBOSS_HOME/server/@[email protected]/conf/props/jmx-console-users.properties

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5e., CAT|II

Plugin: Unix

Control ID: 7e28827ad920cf5b281d48d4c6c62f16799e83230d679f6813154e7208241171