← Back to VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide

V-259009

CAT II (Medium)

The vCenter ESX Agent Manager service must disable stack tracing.

Rule ID

SV-259009r960963_rule

STIG

VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000381

Discussion

Stack tracing provides debugging information from the application call stacks when a runtime error is encountered. If stack tracing is left enabled, Tomcat will provide this call stack information to the requestor, which could result in the loss of sensitive information or data that could be used to compromise the system.

Check Content

At the command prompt, run the following command:

# xmllint --xpath "//Connector[@allowTrace = 'true']" /usr/lib/vmware-eam/web/conf/server.xml

Expected result:

XPath set is empty

If any connectors are returned, this is a finding.

Fix Text

Navigate to and open:

/usr/lib/vmware-eam/web/conf/server.xml

Navigate to and locate:

'allowTrace="true"'

Remove the 'allowTrace="true"' setting.

Note: If "allowTrace" is not present, it defaults to "false".

Restart the service with the following command:

# vmon-cli --restart eam