VCEM-67-000025 – ESX Agent Manager must not enable support for TRACE requests.
Details ‘Trace’ is a technique for a user to request internal information about Tomcat. This is useful during product development...
- Home
- Security Hardening
- DISA STIG VMware vSphere 6.7 EAM Tomcat V1R1
DISA STIG VMware vSphere 6.7 EAM Tomcat V1R1
VCEM-67-000011 – ESX Agent Manager must be configured to limit access to internal packages.
Details The ‘package.access’ entry in the ‘catalina.properties’ file implements access control at the package level. When properly configured, a security...VCEM-67-000026 – ESX Agent Manager must have the debug option turned off.
Details Information needed by an attacker to begin looking for possible vulnerabilities in a web server includes any information about...VCEM-67-000012 – ESX Agent Manager must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled.
Details MIME mappings tell ESX Agent Manager what type of program various file types and extensions are and what external...VCEM-67-000027 – Rsyslog must be configured to monitor and ship ESX Agent Manager log files – access
Details ESX Agent Manager a number of logs that must be offloaded from the originating system. This information can then...VCEM-67-000013 – ESX Agent Manager must have mappings set for Java servlet pages.
Details Resource mapping is the process of tying a particular file type to a process in the web server that...VCEM-67-000014 – ESX Agent Manager must not have the Web Distributed Authoring (WebDAV) servlet installed.
Details WebDAV is an extension to the HTTP protocol that, when developed, was meant to allow users to create, change,...VCEM-67-000015 – ESX Agent Manager must be configured with memory leak protection.
Details The Java Runtime environment can cause a memory leak or lock files under certain conditions. Without memory leak protection,...VCEM-67-000027 – Rsyslog must be configured to monitor and ship ESX Agent Manager log files – main
Details ESX Agent Manager a number of logs that must be offloaded from the originating system. This information can then...VCEM-67-000027 – Rsyslog must be configured to monitor and ship ESX Agent Manager log files – stdout
Details ESX Agent Manager a number of logs that must be offloaded from the originating system. This information can then...