Disable client facing Stack Traces – check for defined exception type
Details When a runtime error occurs during request processing, Apache Tomcat will display debugging information to the requestor. It is...
- Home
- Security Hardening
- CIS Apache Tomcat 9 L1 V1.1.0
CIS Apache Tomcat 9 L1 V1.1.0
Do not allow cross context requests
Details Setting crossContext to true allows for an application to call ServletConext.getContext to return a dispatcher for another application. Rationale:...Do not allow symbolic linking
Details Symbolic links permit one application to include the libraries from another. This allows for re-use of code but also...Do not run applications as privileged
Details Setting the privileged attribute for an application changes the class loader to the Server class loader instead of the...Enable memory leak listener
Details The JRE Memory Leak Prevention Listener provides work-arounds for known places where the Java Runtime environment uses the context...Ensure directory in context.xml is a secure location – configuration
Details The directory attribute tells Tomcat where to store logs. It is recommended that the location referenced by the directory...Ensure directory in context.xml is a secure location – permissions
Details The directory attribute tells Tomcat where to store logs. It is recommended that the location referenced by the directory...Ensure directory in logging.properties is a secure location – check application log directory is secure
Details The directory attribute tells Tomcat where to store logs. The directory value should be a secure location with restricted...Ensure directory in logging.properties is a secure location – check log directory location
Details The directory attribute tells Tomcat where to store logs. The directory value should be a secure location with restricted...Ensure directory in logging.properties is a secure location – check prefix application name
Details The directory attribute tells Tomcat where to store logs. The directory value should be a secure location with restricted...