Skip to content
ATO Pathways
  Log In

Apache Tomcat Application Server 9 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • LDAP authentication must be secured.

    <VulnDiscussion>JNDIRealm is an implementation of the Tomcat Realm interface. Tomcat uses the JNDIRealm to look up users in an LDAP directory...
    Rule High Severity
    Show

  • SRG-APP-000175-AS-000124

    <GroupDescription></GroupDescription>
    Group
    Show

  • DOD root CA certificates must be installed in Tomcat trust store.

    &lt;VulnDiscussion&gt;Tomcat truststores are used to validate client certificates. On the Ubuntu OS, by default, Tomcat uses the "cacerts" file as ...
    Rule Medium Severity
    Show

  • SRG-APP-000176-AS-000125

    <GroupDescription></GroupDescription>
    Group
    Show

  • Keystore file must be protected.

    &lt;VulnDiscussion&gt;Keystore file contains authentication information used to access application data and data resources. Access to the file must...
    Rule Medium Severity
    Show

  • SRG-APP-000179-AS-000129

    <GroupDescription></GroupDescription>
    Group
    Show

  • Tomcat must use FIPS-validated ciphers on secured connectors.

    &lt;VulnDiscussion&gt;Connectors are how Tomcat receives requests over a network port, passes them to hosted web applications via HTTP or AJP, and ...
    Rule High Severity
    Show

  • SRG-APP-000211-AS-000146

    <GroupDescription></GroupDescription>
    Group
    Show

  • Access to JMX management interface must be restricted.

    &lt;VulnDiscussion&gt;Java Management Extensions (JMX) is used to provide programmatic access to Tomcat for management purposes. This includes moni...
    Rule Medium Severity
    Show

  • SRG-APP-000211-AS-000146

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules