Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
A manager role must be assigned to the Apache Tomcat Web apps (Manager, Host-Manager).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-224791 | ISEC-06-551400 | SV-224791r505933_rule | Medium |
| Description |
|---|
| If a manager role is not assigned to the Apache Tomcat web apps, the system administrator will not be able to manage and configure the web apps and security setting may not be configured correctly, with could leave the Apache Tomcat susceptible to attack by an intruder. |
| STIG | Date |
|---|---|
| ISEC7 Sphere Security Technical Implementation Guide | 2020-09-04 |
Details
| Check Text ( C-26482r461629_chk ) |
|---|
| Verify a manager role has been assigned to the Apache Tomcat Web apps (Manager, Host-Manager). Login to the ISEC7 EMM Suite server. Navigate to Confirm a user with the manager role to example: If a manager role has not been assigned to the Apache Tomcat Web apps, this is a finding. |
| Fix Text (F-26470r461630_fix) |
|---|
| To add a manager role to the Apache Tomcat Web apps (Manager, Host-Manager), run the ISEC7 integrated installer or use the following manual procedure: By default there are no users with the manager role assigned. To make use of the manager webapp you need to add a new role and user into the Login to the ISEC7 EMM Suite server. Navigate to Add a user with the manager role to example: Save the file. |