Using Appian 6.6.0 and running JBoss on Windows 2008, I want to see if JBoss Ent

jcheong over 13 years ago

Using Appian 6.6.0 and running JBoss on Windows 2008, I want to see if JBoss Enterprise Application Platofrm (EAP) is installed or not. Checking through the <appian>/bin folder I did not find anything that referenced this so we are thinking it could be a false positive. A security scan flagged it as a potiential security issue but I think that EAP is only used on Redhat systems. Can anyone verify this? Thanks in advance!

[[JBoss Enterprise Application Platform (EAP) contains a vulnerability in its status servlet when handling a "full=true" query string. This could be exploited by attackers to gain sensitive information on deployed web contexts (e.g. Application lists) and subsequently leveraged to research further attacks.]]

Discussion posts and replies are publicly visible

0 Myles Weber
Appian Employee
over 13 years ago

If JBoss EAP is deployed, someone at your installation deployed it. JBoss EAP is not available via Appian's installer. If running JBoss in production, JBoss EAP is the version to use though, rather than Community Edition. EAP is available for more than just the Redhat OS. See forum.appian.com/.../Appian_6.6.x_System_Requirements regarding JBoss usage.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jcheong over 13 years ago

Ok thanks - so JBoss EAP would have to be installed separately and does not come out of the box with the Appian installer.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel