Detections
Analytics

1.9 VCLU-80-000057

Information

The vCenter Lookup service must be configured to limit data exposure between applications.

GROUP ID: V-259045RULE ID: SV-259045r961116

If RECYCLE_FACADES is true or if a security manager is in use, a new facade object will be created for each request. This reduces the chances that a bug in an application might expose data from one request to another.

Solution

Navigate to and open:

/usr/lib/vmware-lookupsvc/conf/catalina.properties

Update or remove the following line:

org.apache.catalina.connector.RECYCLE_FACADES=true

Restart the service with the following command:

vmon-cli --restart lookupsvc

See Also

https://workbench.cisecurity.org/benchmarks/23617

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-23(3), CAT|II, CCI|CCI-001664, Rule-ID|SV-259045r961116_rule, STIG-ID|VCLU-80-000057, Vuln-ID|V-259045

Plugin: Unix

Control ID: 12df3cc08e63cd2cec045074c783af82e488cc0e87eb19a38589e6725a58e0b9