Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The vCenter ESX Agent Manager service must have Autodeploy disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-259027 | VCEM-80-000139 | SV-259027r934739_rule | Medium |
| Description |
|---|
| Tomcat allows auto-deployment of applications while it is running. This can allow untested or malicious applications to be automatically loaded into production. Autodeploy must be disabled in production. |
| STIG | Date |
|---|---|
| VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide | 2023-10-29 |
Details
| Check Text ( C-62767r934737_chk ) |
|---|
| At the command prompt, run the following command: # xmllint --xpath "//Host/@autoDeploy" /usr/lib/vmware-eam/web/conf/server.xml Expected result: autoDeploy="false" If "autoDeploy" does not equal "false", this is a finding. |
| Fix Text (F-62676r934738_fix) |
|---|
| Navigate to and open: /usr/lib/vmware-eam/web/conf/server.xml Navigate to the Restart the service with the following command: # vmon-cli --restart eam |