WA00550 A22 - The TRACE method must be disabled.

Information

Diagnostics help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments to improve server availability. Trace logs are essential to the investigation and prosecution of unauthorized access to web server software and data. However, in standard production operations, use of diagnostics may reveal undiscovered vulnerabilities and ultimately, to compromise of the data. Because of the potential for abuse, the HTTP Trace method should be disabled.

Solution

Edit the httpd.conf file and add or set the value of EnableTrace to 'Off'.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_UNIX_V1R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, Rule-ID|SV-33227r1_rule, STIG-ID|WA00550_A22, Vuln-ID|V-26325

Plugin: Unix

Control ID: 469b6afd01ffe0cc0e484ee46a1513b8e6506e4c148393a34639ae8809aebd14