JBoss QuickStarts must be removed.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-213521 | SRG-APP-000141-AS-000095 | JBOS-AS-000235 | SV-213521r960963_rule | 2025-02-20 | 2 |
Description
JBoss QuickStarts are demo applications that can be deployed quickly. Demo applications are not written with security in mind and often open new attack vectors. QuickStarts must be removed.
ℹ️ Check
Examine the <JBOSS_HOME> folder. If a jboss-eap-6.3.0-GA-quickstarts folder exits, this is a finding.
✔️ Fix
Delete the QuickStarts folder.