Home
Security Hardening
DISA STIG VMware vSphere 6.7 EAM Tomcat V1R1

DISA STIG VMware vSphere 6.7 EAM Tomcat V1R1

VCEM-67-000018 – ESX Agent Manager must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.
Details Determining a safe state for failure and weighing that against a potential denial of service for users depends on...
VCEM-67-000019 – ESX Agent Manager must limit the number of allowed connections.
Details Limiting the number of established connections to the ESX Agent Manager is a basic denial-of-service protection. Servers where the...
VCEM-67-000020 – ESX Agent Manager must set ‘URIEncoding’ to UTF-8 – URIEncoding to UTF-8.
Details Invalid user input occurs when a user inserts data or characters into a hosted application’s data entry field and...
VCEM-67-000021 – ESX Agent Manager must use the ‘setCharacterEncodingFilter’ filter – filter
Details Invalid user input occurs when a user inserts data or characters into a hosted application’s data entry field and...
VCEM-67-000021 – ESX Agent Manager must use the ‘setCharacterEncodingFilter’ filter – filter-mapping
Details Invalid user input occurs when a user inserts data or characters into a hosted application’s data entry field and...
VCEM-67-000022 – ESX Agent Manager must set the welcome-file node to a default web page.
Details Enumeration techniques, such as URL parameter manipulation, rely on being able to obtain information about the web server’s directory...
VCEM-67-000023 – ESX Agent Manager must not show directory listings.
Details Enumeration techniques, such as URL parameter manipulation, rely on being able to obtain information about the web server’s directory...
VCEM-67-000009 – ESX Agent Manager must only run one webapp.
Details VMware ships ESX Agent Managers on the VCSA with one webapp. Any other path is potentially malicious and must...
VCEM-67-000024 – ESX Agent Manager must be configured to show error pages with minimal information.
Details Web servers will often display error messages to client users, including enough information to aid in the debugging of...
VCEM-67-000010 – ESX Agent Manager must not be configured with unsupported realms.
Details ESX Agent Manager performs authentication at the application level and not through Tomcat. To eliminate unnecessary features and ensure...

Prev Next

DISA STIG VMware vSphere 6.7 EAM Tomcat V1R1

VCEM-67-000018 – ESX Agent Manager must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.

VCEM-67-000019 – ESX Agent Manager must limit the number of allowed connections.

VCEM-67-000020 – ESX Agent Manager must set ‘URIEncoding’ to UTF-8 – URIEncoding to UTF-8.

VCEM-67-000021 – ESX Agent Manager must use the ‘setCharacterEncodingFilter’ filter – filter

VCEM-67-000021 – ESX Agent Manager must use the ‘setCharacterEncodingFilter’ filter – filter-mapping

VCEM-67-000022 – ESX Agent Manager must set the welcome-file node to a default web page.

VCEM-67-000023 – ESX Agent Manager must not show directory listings.

VCEM-67-000009 – ESX Agent Manager must only run one webapp.

VCEM-67-000024 – ESX Agent Manager must be configured to show error pages with minimal information.

VCEM-67-000010 – ESX Agent Manager must not be configured with unsupported realms.