← Back to VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide

V-258995

CAT II (Medium)

The vCenter STS service example applications must be removed.

Rule ID

SV-258995r934643_rule

STIG

VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000381

Discussion

Tomcat provides example applications, documentation, and other directories in the default installation that do not serve a production use. These files must be deleted.

Check Content

At the command prompt, run the following command:

# ls -l /var/opt/apache-tomcat/webapps/examples

If the examples folder exists or contains any content, this is a finding.

Fix Text

At the command prompt, run the following command:

# rm -rf /var/opt/apache-tomcat/webapps/examples