The vCenter VAMI service must have resource mappings set to disable the serving of certain file types.
An XCCDF Rule
Description
Resource mapping is the process of tying a particular file type to a process in the web server that can serve that type of file to a requesting client and to identify which file types are not to be delivered to a client. By not specifying which files can and which files cannot be served to a user, VAMI could deliver sensitive files.
- ID
- SV-259144r935336_rule
- Version
- VCLD-80-000033
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/opt/vmware/etc/lighttpd/lighttpd.conf
Add or reconfigure the following value: