1.19 - Remove, rename, or comment out the default user accounts from production servers - 'jbossws-users.properties - kermit'
Information
Remove, rename, or comment out the default user accounts defined in .properties files and login-config.xml
Solution
Remove, rename, or comment out the default user accounts in the default <application-policy> elements located within the configuration file: JBOSS_HOME/server/@PROFILE@/conf/props/jbossws-users.properties