| name | cis-tomcat7-v100-10.16 |
| description | Do not allow cross context requests |
| category | cis-tomcat |
| version | 1.0.0 |
| author | cyberstrike-official |
| tags | ["cis","tomcat","tomcat-7","cross-context"] |
| cis_id | 10.16 |
| cis_benchmark | CIS Apache Tomcat 7 Benchmark v1.0.0 |
| tech_stack | ["tomcat","java"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
CIS Apache Tomcat 7 - 10.16 Do not allow cross context requests (Scored)
Profile Applicability
Description
Do not allow cross context requests
Rationale
See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.
Audit Procedure
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.16 for audit commands.
Remediation
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.16 for remediation steps.
References
- CIS Apache Tomcat 7 Benchmark v1.0.0
Assessment Status