DefaultServlet debug parameter must be disabled.
An XCCDF Rule
Description
The DefaultServlet serves static resources as well as serves the directory listings (if directory listings are enabled). It is declared globally in $CATALINA_BASE/conf/web.xml and by default is configured with the "debug" parameter set to 0, which is disabled. Changing this to a value of 1 or higher sets the servlet to print debug level information. DefaultServlet debug setting must be set to 0 (disabled).
- ID
- SV-222953r960963_rule
- Version
- TCAT-AS-000510
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
From the Tomcat server as a privileged user:
Edit the $CATALINA_BASE/conf/web.xml file.
Examine the <init-param> elements within the <Servletclass> element, if the "debug" <param-value>element is not "0"" change the "debug" <param-value> to read "0".