Detections
Analytics
VCEM-80-000152 - The vCenter ESX Agent Manager service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
Information
Some clients try to guess the character encoding of text media when the mandated default of ISO-8859-1 should be used. Some browsers will interpret as UTF-7 when the characters are safe for ISO-8859-1. This can create the potential for a XSS attack. To defend against this, enforce_encoding_in_get_writer must be set to true.Solution
Navigate to and open:/etc/vmware-eam/catalina.properties
Update or remove the following line:
org.apache.catalina.connector.response.ENFORCE_ENCODING_IN_GET_WRITER=true
Restart the service with the following command:
# vmon-cli --restart eam
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y25M07_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-259034r961863_rule, STIG-ID|VCEM-80-000152, Vuln-ID|V-259034
Plugin: Unix
Control ID: 64854d031c823992076a307311b56ddcc89da4d41b88959f9d35cd8b2f6599c3