VMware vSphere 7.0 vCenter Appliance Perfcharts Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000131-WSR-000051
Group -
SRG-APP-000131-WSR-000073
Group -
Performance Charts must only run one webapp.
VMware ships Performance Charts on the vCenter Server Appliance (VCSA)with one webapp. Any other path is potentially malicious and must be removed.Rule Medium Severity -
SRG-APP-000141-WSR-000015
Group -
Performance Charts must not be configured with unsupported realms.
Performance Charts performs user authentication at the application level and not through Tomcat. Depending on the vCenter Server Appliance (VCSA) version, Performance Charts may come configured wit...Rule Medium Severity -
SRG-APP-000141-WSR-000075
Group -
Performance Charts must be configured to limit access to internal packages.
The "package.access" entry in the "catalina.properties" file implements access control at the package level. When properly configured, a Security Exception will be reported if an errant or maliciou...Rule Medium Severity -
SRG-APP-000141-WSR-000081
Group -
Performance Charts must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled.
MIME mappings tell Performance Charts what type of program various file types and extensions are and what external utilities or programs are needed to execute the file type. By ensuring various she...Rule Medium Severity -
SRG-APP-000141-WSR-000083
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.