CyberStrikeus/CyberStrike - Page 34

cis-tomcat8-v110-2-3

Alter the Advertised server.built Date (Scored)

cis-tomcat8-v110-2-4

Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Scored)

cis-tomcat8-v110-2-5

Disable client facing Stack Traces (Scored)

cis-tomcat8-v110-2-6

Turn off TRACE (Scored)

cis-tomcat8-v110-2-7

Ensure Sever Header is Modified To Prevent Information Disclosure (Not Scored)

cis-tomcat8-v110-3-1

Set a nondeterministic Shutdown command value (Scored)

cis-tomcat8-v110-3-2

Disable the Shutdown port (Not Scored)

cis-tomcat8-v110-4-1

Restrict access to $CATALINA_HOME (Scored)

cis-tomcat8-v110-4-2

Restrict access to $CATALINA_BASE (Scored)

cis-tomcat8-v110-4-3

Restrict access to Tomcat configuration directory (Scored)

cis-tomcat8-v110-4-4

Restrict access to Tomcat logs directory (Scored)

cis-tomcat8-v110-4-5

Restrict access to Tomcat temp directory (Scored)

cis-tomcat8-v110-4-6

Restrict access to Tomcat binaries directory (Scored)

cis-tomcat8-v110-4-7

Restrict access to Tomcat web application directory (Scored)

cis-tomcat8-v110-4-8

Restrict access to Tomcat catalina.properties (Scored)

cis-tomcat8-v110-4-9

Restrict access to Tomcat catalina.policy (Scored)

cis-tomcat8-v110-6-6

Control the maximum size of a POST request that will be parsed for parameters (Scored)

cis-tomcat8-v110-7-1

Application specific logging (Automated)

cis-tomcat8-v110-7-2

Specify file handler in logging.properties files (Automated)

cis-tomcat8-v110-7-3

Ensure className is set correctly in context.xml (Automated)

cis-tomcat8-v110-7-4

Ensure directory in context.xml is a secure location (Manual)

cis-tomcat8-v110-7-5

Ensure pattern in context.xml is correct (Automated)

cis-tomcat8-v110-7-6

Ensure directory in logging.properties is a secure location (Automated)

cis-tomcat8-v110-8-1

Restrict runtime access to sensitive packages (Automated)

cis-tomcat8-v110-9-1

Disabling auto deployment of applications (Automated)

cis-tomcat8-v110-9-2

Disable deploy on startup of applications (Automated)

cis-tomcat8-v110-9-3

Disable deploy on startup of applications (Scored)

cis-tomcat9-v120-1-1

Remove extraneous files and directories (Manual)

cis-tomcat9-v120-1-2

Disable Unused Connectors (Manual)

cis-tomcat9-v120-10-1

Ensure Web content directory is on a separate partition from the Tomcat system files (Manual)

cis-tomcat9-v120-10-10

Configure maxHttpHeaderSize (Automated)

cis-tomcat9-v120-10-11

Force SSL for all applications (Automated)

cis-tomcat9-v120-10-12

Do not allow symbolic linking (Automated)

cis-tomcat9-v120-10-13

Do not run applications as privileged (Automated)

cis-tomcat9-v120-10-14

Do not allow cross context requests (Automated)

cis-tomcat9-v120-10-15

Do not resolve hosts on logging valves (Automated)

cis-tomcat9-v120-10-16

Enable memory leak listener (Automated)

cis-tomcat9-v120-10-17

Setting Security Lifecycle Listener (Automated)

cis-tomcat9-v120-10-18

Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Automated)

cis-tomcat9-v120-10-19

Ensure Manager Application Passwords are Encrypted (Manual)