Description

This Spring Boot web application is configured with Admin MBean enabled. Spring Boot allows developers to enable admin-related features for the application by specifying the spring.application.admin.enabled property.

Remediation

In production websites it's recommended to disable the Admin MBean using the following configuration (in the Spring properties file):

spring.application.admin.enabled=false

References

Related Vulnerabilities