CyberStrikeus/CyberStrike - 第 28 页

cis-tomcat101-2-3

Alter the Advertised server.built Date (Manual)

原文语言：英语

cis-tomcat101-2-4

Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Automated)

原文语言：英语

cis-tomcat101-2-5

Disable client facing Stack Traces (Automated)

原文语言：英语

cis-tomcat101-2-6

Turn off TRACE (Automated)

原文语言：英语

cis-tomcat101-2-7

Ensure Sever Header is Modified To Prevent Information Disclosure (Automated)

原文语言：英语

cis-tomcat101-3-1

Set a nondeterministic Shutdown command value (Automated)

原文语言：英语

cis-tomcat101-3-2

Disable the Shutdown port (Automated)

原文语言：英语

cis-tomcat101-4-1

Restrict access to $CATALINA_HOME (Automated)

原文语言：英语

cis-tomcat101-4-2

Restrict access to $CATALINA_BASE (Automated)

原文语言：英语

cis-tomcat101-7-1

Application specific logging (Automated)

原文语言：英语

cis-tomcat101-7-2

Specify file handler in logging.properties files (Automated)

原文语言：英语

cis-tomcat101-7-3

Ensure className is set correctly in context.xml (Automated)

原文语言：英语

cis-tomcat101-7-4

Ensure directory in context.xml is a secure location (Manual)

原文语言：英语

cis-tomcat101-7-5

Ensure pattern in context.xml is correct (Automated)

原文语言：英语

cis-tomcat101-7-6

Ensure directory in logging.properties is a secure location (Automated)

原文语言：英语

cis-tomcat101-8-1

Restrict runtime access to sensitive packages (Automated)

原文语言：英语

cis-tomcat101-9-1

Disabling auto deployment of applications (Automated)

原文语言：英语

cis-tomcat101-9-2

Disable deploy on startup of applications (Automated)

原文语言：英语

cis-tomcat10-v110-1-1

Remove extraneous files and directories (Manual)

原文语言：英语

cis-tomcat10-v110-1-2

Disable Unused Connectors (Manual)

原文语言：英语

cis-tomcat10-v110-10-1

Ensure Web content directory is on a separate partition from the Tomcat system files (Manual)

原文语言：英语

cis-tomcat10-v110-10-10

Configure maxHttpHeaderSize (Automated)

原文语言：英语

cis-tomcat10-v110-10-11

Force SSL for all applications (Automated)

原文语言：英语

cis-tomcat10-v110-10-12

Do not allow symbolic linking (Automated)

原文语言：英语

cis-tomcat10-v110-10-13

Do not run applications as privileged (Automated)

原文语言：英语

cis-tomcat10-v110-10-14

Do not allow cross context requests (Automated)

原文语言：英语

cis-tomcat10-v110-10-15

Do not resolve hosts on logging valves (Automated)

原文语言：英语

cis-tomcat10-v110-10-16

Enable memory leak listener (Automated)

原文语言：英语

cis-tomcat10-v110-10-17

Setting Security Lifecycle Listener (Automated)

原文语言：英语

cis-tomcat10-v110-10-18

Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production (Automated)

原文语言：英语

cis-tomcat10-v110-10-19

Ensure Manager Application Passwords are Encrypted (Manual)

原文语言：英语

cis-tomcat10-v110-10-2

Restrict access to the web administration application (Automated)

原文语言：英语

cis-tomcat10-v110-10-3

Restrict manager application (Manual)

原文语言：英语

cis-tomcat10-v110-10-4

Force SSL when accessing the manager application via HTTP (Manual)

原文语言：英语

cis-tomcat10-v110-10-5

Rename the manager application (Manual)

原文语言：英语

cis-tomcat10-v110-10-6

Enable strict servlet Compliance (Manual)

原文语言：英语

cis-tomcat10-v110-10-7

Turn off session facade recycling (Manual)

原文语言：英语

cis-tomcat10-v110-10-8

Do not allow additional path delimiters (Manual)

原文语言：英语

cis-tomcat10-v110-10-9

Configure connectionTimeout (Automated)

原文语言：英语

cis-tomcat10-v110-2-1

Alter the Advertised server.info String (Manual)

原文语言：英语