JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The JBoss server must be configured to restrict access to the web servers private key to authenticated system administrators.
The cornerstone of the PKI is the private key used to encrypt or digitally sign information. If the private key is stolen, this will lead to the compromise of the authentication and non-repudiatio...Rule Medium Severity -
SRG-APP-000211-AS-000146
Group -
SRG-APP-000231-AS-000133
Group -
SRG-APP-000267-AS-000170
Group -
Access to JBoss log files must be restricted to authorized users.
If the application provides too much information in error logs and administrative messages to the screen, this could lead to compromise. The structure and content of error messages need to be caref...Rule Medium Severity -
SRG-APP-000316-AS-000199
Group -
Network access to HTTP management must be disabled on domain-enabled application servers not designated as the domain controller.
When configuring JBoss application servers into a domain configuration, HTTP management capabilities are not required on domain member servers as management is done via the server that has been des...Rule Medium Severity -
SRG-APP-000340-AS-000185
Group -
The application server must prevent non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. Restrict...Rule Medium Severity -
SRG-APP-000343-AS-000030
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.