UCF STIG Viewer Logo

Example applications must be removed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-222958 TCAT-AS-000560 SV-222958r615938_rule Low
Description
Tomcat provides example applications, documentation, and other directories in the default installation which do not serve a production use. These files must be deleted.
STIG Date
Apache Tomcat Application Sever 9 Security Technical Implementation Guide 2020-12-11

Details

Check Text ( C-24630r426318_chk )
From the Tomcat server OS type the following command:

sudo ls -l $CATALINA_BASE/webapps/examples.

If the examples folder exists or contains any content, this is a finding.
Fix Text (F-24619r426319_fix)
From the Tomcat server OS type the following command:

sudo rm -rf $CATALINA_BASE/webapps/examples