Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 security update
JBoss: allows empty password to authenticate against LDAP
cpe:/a:redhat:jboss_enterprise_web_platform:5::el4 cpe:/a:redhat:jboss_enterprise_web_platform:5::el5 cpe:/a:redhat:jboss_enterprise_web_platform:5::el6