UCF STIG Viewer Logo

The vCenter STS service example applications must be removed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-258995 VCST-80-000141 SV-258995r960963_rule Medium
Description
Tomcat provides example applications, documentation, and other directories in the default installation that do not serve a production use. These files must be deleted.
STIG Date
VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide 2024-07-11

Details

Check Text ( C-62735r934641_chk )
At the command prompt, run the following command:

# ls -l /var/opt/apache-tomcat/webapps/examples

If the examples folder exists or contains any content, this is a finding.
Fix Text (F-62644r934642_fix)
At the command prompt, run the following command:

# rm -rf /var/opt/apache-tomcat/webapps/examples