'Trace' is a technique for a user to request internal information about Tomcat. This is useful during product development but should not be enabled in production. Allowing an attacker to conduct a Trace operation against ESX Agent Manager will expose information that would be useful to perform a more targeted attack. ESX Agent Manager provides the 'allowTrace' parameter to disable responding to Trace requests.
Navigate to and open: /usr/lib/vmware-eam/web/conf/server.xml Navigate to and locate: 'allowTrace='true'' Remove the 'allowTrace='true'' setting.