An error occurred:

JBoss Enterprise Application Platform 6.3 STIG

JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
JBOS-AS-000250 V-213524 Any unapproved applications must be removed. Cat II
JBOS-AS-000255 V-213525 JBoss application and management ports must be approved by the PPSM CAL. Cat II
JBOS-AS-000260 V-213526 The JBoss Server must be configured to utilize a centralized authentication mechanism such as AD or LDAP. Cat II
JBOS-AS-000265 V-213527 The JBoss Server must be configured to use certificates to authenticate admins. Cat II
JBOS-AS-000275 V-213528 The JBoss server must be configured to use individual accounts and not generic or shared accounts. Cat II
JBOS-AS-000285 V-217099 The JBoss server must be configured to bind the management interfaces to only management networks. Cat II
JBOS-AS-000290 V-213529 JBoss management Interfaces must be integrated with a centralized authentication mechanism that is configured to manage accounts according to DoD policy. Cat II
JBOS-AS-000295 V-213530 The JBoss Password Vault must be used for storing passwords or other sensitive configuration information. Cat II
JBOS-AS-000300 V-213531 JBoss KeyStore and Truststore passwords must not be stored in clear text. Cat II
JBOS-AS-000305 V-213532 LDAP enabled security realm value allow-empty-passwords must be set to false. Cat II
JBOS-AS-000310 V-213533 JBoss must utilize encryption when using LDAP for authentication. Cat II
JBOS-AS-000320 V-213534 The JBoss server must be configured to restrict access to the web servers private key to authenticated system administrators. Cat II
JBOS-AS-000355 V-213535 The JBoss server must separate hosted application functionality from application server management functionality. Cat II
JBOS-AS-000400 V-213536 JBoss file permissions must be configured to protect the confidentiality and integrity of application files. Cat II
JBOS-AS-000425 V-213537 Access to JBoss log files must be restricted to authorized users. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.