Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 security update
JBoss: allows empty password to authenticate against LDAP
cpe:/a:redhat:jboss_enterprise_application_platform:6::el5 cpe:/a:redhat:jboss_enterprise_application_platform:6::el6