UCF STIG Viewer Logo

vSphere UI must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239698 VCUI-67-000017 SV-239698r679200_rule Medium
Description
Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. For the Security Token Service, it is preferable that the service abort startup on any initialization failure rather than continuing in a degraded and potentially insecure state.
STIG Date
VMware vSphere 6.7 UI Tomcat Security Technical Implementation Guide 2021-04-15

Details

Check Text ( C-42931r679198_chk )
At the command line, execute the following command:

# grep EXIT_ON_INIT_FAILURE /usr/lib/vmware-vsphere-ui/server/conf/catalina.properties

Expected result:

org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true

If the output of the command does not match the expected result, this is a finding.
Fix Text (F-42890r679199_fix)
Navigate to and open /etc/vmware-eam/catalina.properties.

Add or change the following line:

org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true