InformationThe manager application allows administrators to manage Tomcat remotely via a web interface. The manager application should be renamed to make it harder for attackers or automated scripts to locate.
By relocating the manager applications, an attacker will need to guess its location rather than simply navigate to the standard location in order to carry out an attack.
SolutionPerform the following to rename the manager application:
Rename the manager application XML file:
# mv $CATALINA_HOME/webapps/host-manager/manager.xml
Update the docBase attribute within $CATALINA_HOME/webapps/host-manager/<new-name>.xml to $CATALINA_HOME/webapps/<new-name>
Move $CATALINA_HOME/webapps/manager to $CATALINA_HOME/webapps/<new-name>
# mv $CATALINA_HOME/webapps/manager $CATALINA_HOME/webapps/<new-name>
The default name of the manager application is manager and is located at: