Detections
Analytics

1.7 VCPF-80-000036

Information

The vCenter Perfcharts service must disable stack tracing.

GROUP ID: V-259077RULE ID: SV-259077r960963

Stack tracing provides debugging information from the application call stacks when a runtime error is encountered. If stack tracing is left enabled, Tomcat will provide this call stack information to the requestor, which could result in the loss of sensitive information or data that could be used to compromise the system.

Solution

Navigate to and open:

/usr/lib/vmware-perfcharts/tc-instance/conf/server.xml

Navigate to and locate:

'allowTrace="true"'

Remove the 'allowTrace="true"' setting.

Note: If "allowTrace" is not present, it defaults to "false".

Restart the service with the following command:

vmon-cli --restart perfcharts

See Also

https://workbench.cisecurity.org/benchmarks/23627

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-259077r960963_rule, STIG-ID|VCPF-80-000036, Vuln-ID|V-259077

Plugin: Unix

Control ID: a8da40a6b0e0ecb717d05a4b18e25b9914433b04443c6f322cfa9a3e126da7b3