VCST-80-000143 - The vCenter STS service default documentation must be removed.

Information

Tomcat provides documentation and other directories in the default installation that do not serve a production use. These files must be deleted.

Solution

At the command prompt, run the following command:

# rm -rf /var/opt/apache-tomcat/webapps/docs

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M07_STIG.zip

Item Details

Audit Name: DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service STS STIG v2r2

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-258997r960963_rule, STIG-ID|VCST-80-000143, Vuln-ID|V-258997

Plugin: Unix

Control ID: c1ac6307fbe204a83746e0fc5b9b40862598a3942f5669a2577cc4f303db902f