Carlos Oliva [https://community.jboss.org/people/ramboid] created the discussion

"Re: JBOSS7: ASV Scan Report Attestation of Scan Compliance"

To view the discussion, visit: https://community.jboss.org/message/739655#739655

--------------------------------------------------------------
Hi Peter,
Could you mention areas for locking down and getting rid of the error?  Trying 
to identify these areas, it has been impossible to reproduce the error with the 
information in the error report.  In AS7 JIRA (AS7-4929), Darran Lofthouse 
reported his attempts to reproduce the error by issuing the requests that the 
report describes.  My Systems Manager is tryign to reach to the makers of the 
scanning tool and get more information.  We are waiting for their response.  It 
is difficult to fathom what else should be locked without further information.

Could this be "a false positive"?  Darran explained to me that this error seems 
to belong to a different server, and that given the information at hand, Darran 
thought that it could be a "false positive".  Moreover, a google search on the 
main description of the error "myserver 1.2.0" revealed just one result for 
JBoss with a different scanner and it was deemed to be a "false positive".
--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/739655#739655]

Start a new discussion in Beginner's Corner at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2075]

_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user

Reply via email to