[jboss-user] [Beginner's Corner] - Re: JBOSS7: ASV Scan Report Attestation of Scan Compliance

[Carlos Oliva]

Carlos Oliva [https://community.jboss.org/people/ramboid] created the discussion

"Re: JBOSS7: ASV Scan Report Attestation of Scan Compliance"

To view the discussion, visit: https://community.jboss.org/message/739655#739655

--------------------------------------------------------------
Hi Peter,
Could you mention areas for locking down and getting rid of the error?  Trying to identify these areas, it has been impossible to reproduce the error with the information in the error report.  In AS7 JIRA (AS7-4929), Darran Lofthouse reported his attempts to reproduce the error by issuing the requests that the report describes.  My Systems Manager is tryign to reach to the makers of the scanning tool and get more information.  We are waiting for their response.  It is difficult to fathom what else should be locked without further information.

Could this be "a false positive"?  Darran explained to me that this error seems to belong to a different server, and that given the information at hand, Darran thought that it could be a "false positive".  Moreover, a google search on the main description of the error "myserver 1.2.0" revealed just one result for JBoss with a different scanner and it was deemed to be a "false positive".
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/739655#739655]

Start a new discussion in Beginner's Corner at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2075]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-user/attachments/20120604/dcf7a55b/attachment-0001.html