Detections
Analytics

1.4.6 Turn off TRACE (verify if allowTrace is set to false)

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The HTTP TRACE verb provides debugging and diagnostics information for a given request.

See Also

https://workbench.cisecurity.org/files/261

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-11, CSCv6|18.5

Plugin: Unix

Control ID: 8e9004cbff0c0b2ee9ef8d6c3d0d18f77b58661c78ea47f1df8b23c40041abca