Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Users in JBoss Management Security Realms must be in the appropriate role.
Description
Discussion Text
Security realms are a series of mappings between users and passwords and users and roles. There are 2 JBoss security realms provided by default; they are "management realm" and "application realm".
Management realm stores authentication information for the management API, which provides functionality for the web-based management console and the management command line interface (CLI).
mgmt-groups.properties stores user to group mapping for the ManagementRealm but only when role-based access controls (RBAC) is enabled.
If management users are not in the appropriate role, unauthorized access to JBoss resources can occur.
Management realm stores authentication information for the management API, which provides functionality for the web-based management console and the management command line interface (CLI).
mgmt-groups.properties stores user to group mapping for the ManagementRealm but only when role-based access controls (RBAC) is enabled.
If management users are not in the appropriate role, unauthorized access to JBoss resources can occur.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.