title: Java Debug Wire Protocol Remote Code Execution Vulnerability - joss
body: <p>Our security team found below issue with JDWP in jboss. <strong>How can I fix this ?</strong> </p>
  
  <blockquote>
    <p>-Djavax.net.ssl.trustStorePassword=changeit -Dhttps.protocols=TLSv1 -Xdebug -Xrunjdwp:transport=dt_socket,address=8787,server=y,suspend=n -Dsun.rmi.dgc.client.gcInterval=3600000 -Dsun.rmi.dgc.server.gcInterval=3600000 -Dorg.jboss.boot.log.file=/</p>
  </blockquote>
  
  <p><strong>Title</strong>: Java Debug Wire Protocol Remote Code Execution Vulnerability</p>
  
  <h2>Severity: Critical</h2>
  
  <h1>Description</h1>
  
  <h3>Affected Hosts</h3>
  
  <ul>
  <li>IP address:tcp/8787</li>
  </ul>
  
  <p>The remote server is running Java Debug Wire Protocol service. No authentication is required if the service is enabled.</p>
  
  <p>The vulnerabilities can be exploited by malicious users to execute arbitrary code.</p>
  
  <h1>Remediation</h1>
  
  <p>Disable the service</p>
  
  <h1>Proof of Concept</h1>
  
  <p>Java Debug Wire Protocol Remote Code Execution Vulnerability detected on port 8787 over TCP.</p>
  
  <p>Thanks,
  Vishnu</p>