Description
In the default configuration, after JBoss is installed, the JMX console is available at http://localhost:8080/jmx-console. The JMX console can be used to display the JNDI tree, dump the list of threads, redeploy an application or even shutdown the application server. By default, the console is not secured and can be used by remote attackers. Check References for detailed information.
Remediation
Restrict access to JMX Management Console.
References
Related Vulnerabilities
WordPress REST API User Enumeration
WordPress Plugin Salon Booking System Multiple Information Disclosure Vulnerabilities (7.6.2)
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)
WordPress Plugin Duplicate Page Multiple Vulnerabilities (2.3)
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)