JMX Server Allows Clear Text Authentication

The JMX server is exposed to sniffing attacks because It's authentication credentials are transferred via clear text. QID Detection Logic (Authenticated):
This QID executes "ps auxf | grep -i 'jmxremote.ssl'|grep -i -v -E "(jmxremote\.host=localhost|jmxremote\.host=127\.0\.0\.1\D|jmx\.local\.port)"|grep -v grep" commands to list all the running process on localhost interfaces then posts if any vulnerable process uses this insecure configuration "jmxremote.ssl=false".

Traffic over non-SSL is unencrypted and vulnerable to sniffing attacks that can expose sensitive information about the user or the application.

Enable SSL on the JMX server.