UCF STIG Viewer Logo

ESX Agent Manager must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239383 VCEM-67-000012 SV-239383r674643_rule Medium
Description
MIME mappings tell ESX Agent Manager what type of program various file types and extensions are and what external utilities or programs are needed to execute the file type. By ensuring that various shell script MIME types are not included in web.xml, the server is protected against malicious users tricking the server into executing shell command files.
STIG Date
VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42616r674641_chk )
At the command prompt, execute the following command:

# grep -En '(x-csh<)|(x-sh<)|(x-shar<)|(x-ksh<)' /usr/lib/vmware-eam/web/webapps/eam/WEB-INF/web.xml

If the command produces any output, this is a finding.
Fix Text (F-42575r674642_fix)
Open /usr/lib/vmware-eam/web/webapps/eam/WEB-INF/web.xml in a text editor. Remove the following nodes lines:

application/x-csh
application/x-shar
application/x-sh
application/x-ksh