/
Java JMX RMI accessible on Blancco Management Console server

Java JMX RMI accessible on Blancco Management Console server

Owned by Sami Purho
Feb 25, 2020
Created dateUpdated dateAffects versionFix version

 

 

Management Console 5.2.0 and olderManagement Console 5.3.0

Problem

When checking the vulnerabilities of the Blancco Management Console server some scanners may highlight that the remote access to JMX RMI is enabled.

Cause

On Blancco Management Console 5.2.0 (and older), by default the remote access of JMX RMI is disabled but the port is open.

Resolution

Starting with Management Console version 5.3.0 the port is closed and security scanners should no longer claim this as a vulnerability.

If current Management Console vesion is older than 5.3.0, it is recommended to update the software to a newer version where Java JMX RMI port is closed.