[jboss-user] [Installation, Configuration & Deployment] - Re: FYI - JBoss AS vulnerability

[PeterJ]

JBoss, as provided, is "developer friendly" which means that it is easy to start working with because it is wide open and has no security. Before releasing JBoss into production, you must take steps to secure it. In this light, it is good that the US-CERT report alerts companies to this fact.

By the way, the JEMS installer gives the option of securing the various consoles as part of the installation. 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4023147#4023147

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4023147