Documentation must be removed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-222960	TCAT-AS-000580	SV-222960r615938_rule		Low

Description
Tomcat provides documentation and other directories in the default installation which do not serve a production use. These files must be deleted.

STIG	Date
Apache Tomcat Application Sever 9 Security Technical Implementation Guide	2021-12-27

Details

Check Text ( C-24632r426324_chk )
From the Tomcat server OS type the following command: sudo ls -l $CATALINA_BASE/webapps/docs. If the docs folder exists or contains any content, this is a finding.

Fix Text (F-24621r426325_fix)
From the Tomcat server OS type the following command: sudo rm -rf $CATALINA_BASE/webapps/docs