aXes User Forum

jaimosky

Hi,

has anybody perform a pentest againts an axes installations?
I performed one against Version 4.2.1.000.000000 and there are a couple of issues (with app.pentest-tools.com)

Vulnerabilities found for Moment.js 2.22.2 Risk level High Port / Protocol 443 / tcp
CVSS v3 CVSS v3: 7.5
EPSS EPSS: 0 ...

jaimosky

Hi,

we run aXes in a IBM i and there is sometimes that the users in some companies (at least happend in 2 different companies) they get following response from aXes:

https://portal.ldv.at:8081/Screenshot2025-06-24143842.png

The application works correctly 10s of other companies, just in these 2 ...

jaimosky

I mean Azure Single Sign On.

So that the user can use axes without having to log in in the IBM i.

Jaime

jaimosky

HI,

does anybody have experience using aXes and Azure? one of the customers using our shop have asked if it is possible to implement it and I would like to know if so, and if there is any kind of documentation or experience about it.

best regards.
Jaime

jaimosky

I have found it in Tips & Tricks:

viewtopic.php?f=10&t=140&sid=06faf861cf ... ad2063be8f

jaimosky

Hi,
is there a documentation how should you start a second instance of the JSM Server?
I know should be not very difficult but I cannot sort it out and maybe you can provide me with some hints.
Thanks a lot!
Jaime

jaimosky

Hi,

I think you can change it in the theme.css file:

Code: Select all

#terminalInner.axdefault .x21, #terminalInner.axdefault .x21 .ax-terminal-inputField {
    color: #000000;
    background-color: #FFFFFF;
}

Jaime

jaimosky

Hi,

I want to add a folder hanging from /htdocs (f.e /myfolder) and I add a index.html there (JSM Server).
In the W3 Server if I had this constellation and I enter the URL http://myDomain/myfolder it gives me back the index.html, but this behaviour is not happening in JSM, I have to enter http ...

jaimosky

Hi, it´s me again.

After looking in internet I have figure out, what the problem is. In order to be able to use a signed certificate in the jks file, I should generate the CSR with it, and leave it sign by a CA. Then import both, the CA and the signed certifiace and then should work.

But my ...

jaimosky

Hi,

I did the steps you mention here, but instead I have used Digital Certificate Manager (I did a CA and a Certificate for ldv720 signed with the CA and exported the files).
So I created the jks file

keytool
-genkeypair
-alias sslkey
-keyalg RSA
-keysize 2048
-sigalg SHA256withRSA ...

aXes User Forum

Search found 40 matches

pentest against AXES JVM

Unexpected client request, unexpected client IP address

Re: aXes and Azure?

aXes and Azure?

Re: Start a second instance of the JSM Server

Start a second instance of the JSM Server

Re: Text color subfile header

Subfolder in JSM Server

Re: SslPort for AXESJSM

Re: SslPort for AXESJSM