VCUI-67-000029 - vSphere UI must disable the shutdown port - vsphere-ui.json

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


An attacker has at least two reasons to stop a web server. The first is to cause a denial of service, and the second is to put in place changes the attacker made to the web server configuration. If the Tomcat shutdown port feature is enabled, a shutdown signal can be sent to vSphere UI through this port. To ensure availability, the shutdown port must be disabled.


Navigate to and open /usr/lib/vmware-vsphere-ui/server/conf/server.xml.

Make sure that the server port is disabled:

<Server port='${shutdown.port}' ...>

See Also

Item Details

References: CAT|II, CCI|CCI-002385, Rule-ID|SV-239710r679236_rule, STIG-ID|VCUI-67-000029, Vuln-ID|V-239710

Plugin: Unix

Control ID: d649f7dafd698a32d5d33ea1b90dd28c48b9bf47d96fdaa16a0f14a15343d949