title: How to fix Java JMX RMI Accessible without Credentials
body: <p>Any idea how to fix this security vulnerability ?
  Java JMX interface is accessible via following username/password pairs: admin/password admin/admin admin/activemq monitorRole/QED controlRole/R%26D controlrole/password monitorrole/password cassandra/cassandrapassword monitorRole/tomcat controlRole/tomcat monitorRole/mrpasswd controlRole/crpasswd role1/role1passwd role2/role2passwd role3/role3passwd admin/thisIsSupposedToBeAStrongPassword! QID Detection Logic (Authenticated):
  This QID tries to log into JMX RMI server using above credentials. Note:if remote JMX RMI sever accessible without authentication. all of above credentials will post.</p>
  
  <p>fix for this mentions to change the common password, but not sure where exactly and if that is the right way. Any guidance is appreciated</p>