JMX Authentication Not Enabled on Localhost Interface

JMX authentication not enabled on localhost interface detected on the system.

QID Detection Logic (Authenticated):
This QID executes "ps auxf | grep -E "(jmxremote.host=localhost|jmxremote.host=127.0.0.1)"" commands to list all the running process on localhost interfaces then posts if any vulnerable process uses this insecure configuration "com.sun.management.jmxremote.authenticate=false"".

Successful exploitation could lead to SSRF attacks or privilege escalation.

Enable authentication on JMX