Home
Security Hardening
DISA STIG VMware vSphere 6.7 STS Tomcat V1R1

DISA STIG VMware vSphere 6.7 STS Tomcat V1R1

VCST-67-000021 – The Security Token Service must use the ‘setCharacterEncodingFilter’ filter – setCharacterEncodingFilter filter – filter
Details Invalid user input occurs when a user inserts data or characters into a hosted application’s data entry field and...
VCST-67-000006 – The Security Token Service must generate log records during Java startup and shutdown – prefix
Details Logging must be started as soon as possible when a service starts and as late as possible when a...
VCST-67-000007 – Security Token Service log files must only be modifiable by privileged users.
Details Log data is essential in the investigation of events. The accuracy of the information is always pertinent. One of...
VCST-67-000008 – The Security Token Service application files must be verified for their integrity.
Details Verifying that the Security Token Service application code is unchanged from its shipping state is essential for file validation...
VCST-67-000009 – The Security Token Service must only run one web app.
Details VMware ships the Security Token Service on the VCSA with one web app, in ROOT.war. Any other .war file...
VCST-67-000010 – The Security Token Service must not be configured with unused realms.
Details The Security Token Service performs user authentication at the application level and not through Tomcat. To eliminate unnecessary features...
VCST-67-000026 – The Security Token Service must have the debug option disabled.
Details Information needed by an attacker to begin looking for possible vulnerabilities in a web server includes any information about...
VCST-67-000027 – Rsyslog must be configured to monitor and ship Security Token Service log files – sts-runtime
Details The Security Token Service produces a number of logs that must be offloaded from the originating system. This information...
VCST-67-000027 – Rsyslog must be configured to monitor and ship Security Token Service log files – vmidentity
Details The Security Token Service produces a number of logs that must be offloaded from the originating system. This information...
VCST-67-000028 – The Security Token Service must be configured with the appropriate ports – http
Details Web servers provide numerous processes, features, and functionalities that use TCP/IP ports. Some of these processes may be deemed...

Prev Next

DISA STIG VMware vSphere 6.7 STS Tomcat V1R1

VCST-67-000021 – The Security Token Service must use the ‘setCharacterEncodingFilter’ filter – setCharacterEncodingFilter filter – filter

VCST-67-000006 – The Security Token Service must generate log records during Java startup and shutdown – prefix

VCST-67-000007 – Security Token Service log files must only be modifiable by privileged users.

VCST-67-000008 – The Security Token Service application files must be verified for their integrity.

VCST-67-000009 – The Security Token Service must only run one web app.

VCST-67-000010 – The Security Token Service must not be configured with unused realms.

VCST-67-000026 – The Security Token Service must have the debug option disabled.

VCST-67-000027 – Rsyslog must be configured to monitor and ship Security Token Service log files – sts-runtime

VCST-67-000027 – Rsyslog must be configured to monitor and ship Security Token Service log files – vmidentity

VCST-67-000028 – The Security Token Service must be configured with the appropriate ports – http