The vCenter UI service must be configured to limit data exposure between applications.
An XCCDF Rule
Description
If RECYCLE_FACADES is true or if a security manager is in use, a new facade object will be created for each request. This reduces the chances that a bug in an application might expose data from one request to another.
- ID
- SV-259112r961116_rule
- Version
- VCUI-80-000057
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/usr/lib/vmware-vsphere-ui/server/conf/catalina.properties
Update or remove the following line: