cis-tomcat7-v100-10-20

name	cis-tomcat7-v100-10.20
description	use the logEffectiveWebXml and metadata-complete settings for deploying applications in production
category	cis-tomcat
version	1.0.0
author	cyberstrike-official
tags	["cis","tomcat","tomcat-7","deployment"]
cis_id	10.20
cis_benchmark	CIS Apache Tomcat 7 Benchmark v1.0.0
tech_stack	["tomcat","java"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

CIS Apache Tomcat 7 - 10.20 use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Scored)

Profile Applicability

• Level 2

Description

use the logEffectiveWebXml and metadata-complete settings for deploying applications in production

Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.20 for audit commands.

Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.20 for remediation steps.

References

• CIS Apache Tomcat 7 Benchmark v1.0.0

Assessment Status

• Scored
• Profile: Level 2