Home
Security Hardening
DISA STIG VMware vSphere 6.7 Perfcharts Tomcat V1R1

DISA STIG VMware vSphere 6.7 Perfcharts Tomcat V1R1

VCPF-67-000011 – Performance Charts must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.
Details MIME mappings tell the Performance Charts what type of program various file types and extensions are and what external...
VCPF-67-000012 – Performance Charts must have mappings set for Java servlet pages.
Details Resource mapping is the process of tying a particular file type to a process in the web server that...
VCPF-67-000013 – Performance Charts must not have the Web Distributed Authoring (WebDAV) servlet installed.
Details WebDAV is an extension to the HTTP protocol that, when developed, was meant to allow users to create, change,...
VCPF-67-000014 – Performance Charts must be configured with memory leak protection.
Details The Java Runtime environment can cause a memory leak or lock files under certain conditions. Without memory leak protection,...
VCPF-67-000015 – Performance Charts must not have any symbolic links in the web content directory tree.
Details A web server is designed to deliver content and execute scripts or applications on the request of a client...
VCPF-67-000016 – Performance Charts directory tree must have permissions in an ‘out-of-the box’ state – out-of-the box state.
Details Accounts on a web server are to be kept to a minimum. Only administrators, web managers, developers, auditors, and...
VCPF-67-000028 – Performance Charts must be configured with the appropriate ports – https
Details Web servers provide numerous processes, features, and functionalities that use TCP/IP ports. Some of these processes may be deemed...
VCPF-67-000017 – Performance Charts must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.
Details Determining a safe state for failure and weighing that against a potential denial of service for users depends on...
VCPF-67-000029 – Performance Charts must disable the shutdown port.
Details An attacker has at least two reasons to stop a web server. The first is to cause a denial...
VCPF-67-000018 – Performance Charts must limit the number of allowed connections.
Details Limiting the number of established connections to Performance Charts is a basic denial-of-service protection. Servers where the limit is...

Prev Next

DISA STIG VMware vSphere 6.7 Perfcharts Tomcat V1R1

VCPF-67-000011 – Performance Charts must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.

VCPF-67-000012 – Performance Charts must have mappings set for Java servlet pages.

VCPF-67-000013 – Performance Charts must not have the Web Distributed Authoring (WebDAV) servlet installed.

VCPF-67-000014 – Performance Charts must be configured with memory leak protection.

VCPF-67-000015 – Performance Charts must not have any symbolic links in the web content directory tree.

VCPF-67-000016 – Performance Charts directory tree must have permissions in an ‘out-of-the box’ state – out-of-the box state.

VCPF-67-000028 – Performance Charts must be configured with the appropriate ports – https

VCPF-67-000017 – Performance Charts must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.

VCPF-67-000029 – Performance Charts must disable the shutdown port.

VCPF-67-000018 – Performance Charts must limit the number of allowed connections.