cis-tomcat7-v100-6-4

name	cis-tomcat7-v100-6.4
description	Ensure secure is set to true only for SSL-enabled Connectors
category	cis-tomcat
version	1.0.0
author	cyberstrike-official
tags	["cis","tomcat","tomcat-7","ssl-tls"]
cis_id	6.4
cis_benchmark	CIS Apache Tomcat 7 Benchmark v1.0.0
tech_stack	["tomcat","java"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

CIS Apache Tomcat 7 - 6.4 Ensure secure is set to true only for SSL-enabled Connectors (Scored)

Profile Applicability

• Level 1

Description

Ensure secure is set to true only for SSL-enabled Connectors

Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 6.4 for audit commands.

Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 6.4 for remediation steps.

References

• CIS Apache Tomcat 7 Benchmark v1.0.0

Assessment Status

• Scored
• Profile: Level 1