Home
Security Hardening
CIS Apache Tomcat 8 L1 V1.1.0 Middleware

CIS Apache Tomcat 8 L1 V1.1.0 Middleware

Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler logging is enabled in default
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler logging is enabled in web application
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Specify file handler in logging.properties files – check if org.apache.juli.FileHandler exists in default
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Specify file handler in logging.properties files – check if org.apache.juli.FileHandler exists in web application
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Specify file handler in logging.properties files – check if org.apache.juli.FileHandler logging is enabled in default
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Specify file handler in logging.properties files – check if org.apache.juli.FileHandler logging is enabled in web application
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...
Starting Tomcat with Security Manager
Details Configure applications to run in a sandbox using the Security Manager. The Security Manager restricts what classes Tomcat can...
Turn off session facade recycling
Details The RECYCLE_FACADES can specify if a new facade will be created for each request. If a new facade is...
Turn off TRACE – check server.xml
Details The HTTP TRACE verb provides debugging and diagnostics information for a given request. Rationale: Diagnostic information, such as that...
Turn off TRACE – check web.xml config files
Details The HTTP TRACE verb provides debugging and diagnostics information for a given request. Rationale: Diagnostic information, such as that...

CIS Apache Tomcat 8 L1 V1.1.0 Middleware

Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler logging is enabled in default

Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler logging is enabled in web application

Specify file handler in logging.properties files – check if org.apache.juli.FileHandler exists in default

Specify file handler in logging.properties files – check if org.apache.juli.FileHandler exists in web application

Specify file handler in logging.properties files – check if org.apache.juli.FileHandler logging is enabled in default

Specify file handler in logging.properties files – check if org.apache.juli.FileHandler logging is enabled in web application

Starting Tomcat with Security Manager

Turn off session facade recycling

Turn off TRACE – check server.xml

Turn off TRACE – check web.xml config files