Detections
Analytics
VCPF-80-000057 - The vCenter Perfcharts service must be configured to limit data exposure between applications.
Information
If RECYCLE_FACADES is true or if a security manager is in use, a new facade object will be created for each request. This reduces the chances that a bug in an application might expose data from one request to another.Solution
Navigate to and open:/usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties
Update or remove the following line:
org.apache.catalina.connector.RECYCLE_FACADES=true
Restart the service with the following command:
# vmon-cli --restart perfcharts
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M10_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-23(3), CAT|II, CCI|CCI-001664, Rule-ID|SV-259079r1264771_rule, STIG-ID|VCPF-80-000057, Vuln-ID|V-259079
Plugin: Unix
Control ID: b219d27e13c72e3f97c3fb50c0e47f03e296629f2c59bb84d78810adb8625f94