1.1 Remove extraneous files and directories - @APP_Config_catalogs@/webapps/examples

800-53|CM-6

800-53|CM-7

CSCv7|2.6

1.1 Remove extraneous files and directories - /webapps/docs

1.1 Remove extraneous files and directories - /webapps/host-manager

1.1 Remove extraneous files and directories - /webapps/manager

1.1 Remove extraneous files and directories - /webapps/ROOT

CSCv7|9.2

2.1 Alter the Advertised server.info String

CSCv7|13.2

2.2 Alter the Advertised server.number String

2.3 Alter the Advertised server.built Date

2.4 Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors

2.7 Ensure Sever Header is Modified To Prevent Information Disclosure

800-53|CA-9

800-53|SC-7

800-53|SC-7(5)

CSCv7|1.7

800-53|AC-3

800-53|AC-3(1)

CSCv7|3.3

CSCv7|14.6

CSCv7|5.1

800-53|IA-5(1)

CSCv7|16.4

800-53|AU-3

800-53|AU-3(1)

800-53|AU-7

800-53|AU-12

CSCv7|6.3

7.3 Ensure className is set correctly in context.xml

9.2 Disabling auto deployment of applications

9.3 Disable deploy on startup of applications

800-53|AC-6(2)

800-53|AC-6(5)

CSCv7|4.7

10.5 Rename the manager application - host-manager/manager.xml

10.5 Rename the manager application - webapps/manager

800-53|SC-7(8)

10.8 Do not allow additional path delimiters - ALLOW_BACKSLASH

10.8 Do not allow additional path delimiters - ALLOW_ENCODED_SLASH

800-53|AC-18

800-53|SC-23

800-53|AC-17(2)

800-53|IA-5

800-53|SC-8

800-53|SC-8(1)

CSCv7|14.4

10.15 Do not resolve hosts on logging valves

800-53|SI-8

CIS_Apache_Tomcat_9_L2_v1.2.0_Middleware.audit from CIS Apache Tomcat 9 Benchmark

CIS Apache Tomcat 9 L2 v1.2.0 Middleware

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous

CIS Apache Tomcat 9 L2 v1.2.0 Middleware Download File