documentation_complete: true

title: 'Ensure No Default Roles Exist'

description: |-
    Remove, rename, or comment out the default roles
    defined in .properties files.

rationale: |-
    Default configurations are commonly leveraged by attackers to
    gain entry into closed systems. Removing, renaming, or commenting
    out default roles makes malicious exploitation more complex.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: IA-5

ocil_clause: 'default JBoss roles should not exist'
