My group is working on a way to perform C&A on JBOSS. The method discussed here did not work as expected with JBOSS EAP 5.1 and JBOSS AS Community 6.0.1. After poking around a bit I found that the $JBOSS_HOME/bin/run.sh script will tell you the version. For C&A purposes it's nice to have a quick method to get answers so we have been using the following find statement:
find $JBOSS_HOME -name run.sh -exec {} -V \; | grep '^JBoss'
JBoss 5.1.1 (build: SVNTag=JBPAPP_5_1_1 date=201105171607)
Unfortunatily, if you are working with SCAP this method is useless since there is no definition that I am aware of that allows for the execution of a shell script. But you can use the Independent Definition 5.10.1 1/27/2012 ind:xmlfilecontent test to extract the JBoss version from the $JBOSS_HOME/jar-versions.xml:
name: applet.jar
specVersion: 5.1.1
specVendor: JBoss (http://www.jboss.org/)
specTitle: JBoss
implVersion: 5.1.1 (build: SVNTag=JBPAPP_5_1_1 date=201105171607)
implVendor: JBoss Inc.
implTitle: JBoss [EAP]
implVendorID: http://www.jboss.org/
implURL: http://www.jboss.org/
sealed: false
md5Digest: fae8c900c0283406ecb991c67ddb01fb