Alter the Advertised server.built Date
Details The server.built date represents the date which Tomcat was compiled and packaged. This value is presented to Tomcat clients...
- Home
- Security Hardening
- CIS Apache Tomcat 7 L2 V1.1.0
CIS Apache Tomcat 7 L2 V1.1.0
Alter the Advertised server.info String
Details The server.info attribute contains the name of the application service. This value is presented to Tomcat clients when clients...Alter the Advertised server.number String
Details The server.number attribute represents the specific version of Tomcat that is executing. This value is presented to Tomcat clients...Application specific logging
Details By default, java.util.logging does not provide the capabilities to configure per-web application settings, only per VM. In order to...Configure connectionTimeout
Details The connectionTimeout setting allows Tomcat to close idle sockets after a specific amount of time to save system resources....Configure log file size limit (verify java.util.logging.FileHandler.limit is present)
Details By default, the logging.properties file will have no defined limit for the log file size. This is a potential...Configure log file size limit (verify java.util.logging.FileHandler.limit is smaller than disk partition)
Details By default, the logging.properties file will have no defined limit for the log file size. This is a potential...Configure maxHttpHeaderSize
Details The maxHttpHeaderSize limits the size of the request and response headers defined in bytes. If not specified, the default...Disable deploy on startup of applications
Details Tomcat allows auto deployment of applications. It is recommended that this capability be disabled. Solution In the $CATALINA_HOME/conf/server.xml file,...Disable the Shutdown port
Details Tomcat listens on TCP port 8005 to accept shutdown requests. By connecting to this port and sending the SHUTDOWN...