Apache Tomcat Application Server 9 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Tomcat server must be patched for security vulnerabilities.
<VulnDiscussion>Tomcat is constantly being updated to address newly discovered vulnerabilities, some of which include denial-of-service attac...Rule Medium Severity -
SRG-APP-000495-AS-000220
<GroupDescription></GroupDescription>Group -
AccessLogValve must be configured for Catalina engine.
<VulnDiscussion>The <Engine> container represents the entire request processing machinery associated with a particular Catalina Service...Rule Medium Severity -
SRG-APP-000504-AS-000229
<GroupDescription></GroupDescription>Group -
Changes to $CATALINA_HOME/bin/ folder must be logged.
<VulnDiscussion>The $CATALINA_HOME/bin folder contains startup and control scripts for the Tomcat Catalina server. To provide forensic eviden...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules