CyberStrikeus/CyberStrike - 第 29 页

cis-tomcat10-v110-2-2

Alter the Advertised server.number String (Manual)

原文语言：英语

cis-tomcat10-v110-2-3

Alter the Advertised server.built Date (Manual)

原文语言：英语

cis-tomcat10-v110-2-4

Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Automated)

原文语言：英语

cis-tomcat10-v110-2-5

Disable client facing Stack Traces (Automated)

原文语言：英语

cis-tomcat10-v110-2-6

Turn off TRACE (Automated)

原文语言：英语

cis-tomcat10-v110-2-7

Ensure Sever Header is Modified To Prevent Information Disclosure (Automated)

原文语言：英语

cis-tomcat10-v110-3-1

Set a nondeterministic Shutdown command value (Automated)

原文语言：英语

cis-tomcat10-v110-3-2

Disable the Shutdown port (Automated)

原文语言：英语

cis-tomcat10-v110-4-1

Restrict access to $CATALINA_HOME (Automated)

原文语言：英语

cis-tomcat10-v110-4-2

Restrict access to $CATALINA_BASE (Automated)

原文语言：英语

cis-tomcat10-v110-7-1

Application specific logging (Automated)

原文语言：英语

cis-tomcat10-v110-7-2

Specify file handler in logging.properties files (Automated)

原文语言：英语

cis-tomcat10-v110-7-3

Ensure className is set correctly in context.xml (Automated)

原文语言：英语

cis-tomcat10-v110-7-4

Ensure directory in context.xml is a secure location (Manual)

原文语言：英语

cis-tomcat10-v110-7-5

Ensure pattern in context.xml is correct (Automated)

原文语言：英语

cis-tomcat10-v110-7-6

Ensure directory in logging.properties is a secure location (Automated)

原文语言：英语

cis-tomcat10-v110-8-1

Restrict runtime access to sensitive packages (Automated)

原文语言：英语

cis-tomcat10-v110-9-1

Disabling auto deployment of applications (Automated)

原文语言：英语

cis-tomcat10-v110-9-2

Disable deploy on startup of applications (Automated)

原文语言：英语

cis-tomcat10-v110-9-3

Disable deploy on startup of applications (Automated)

原文语言：英语

cis-tomcat7-v100-1-1

Remove extraneous files and directories

原文语言：英语

cis-tomcat7-v100-1-2

Disable Unused Connectors

原文语言：英语

cis-tomcat7-v100-10-1

Ensure Web content directory is on a separate partition from the Tomcat system files

原文语言：英语

cis-tomcat7-v100-10-10

Configure connectionTimeout

原文语言：英语

cis-tomcat7-v100-10-11

Configure maxHttpHeaderSize

原文语言：英语

cis-tomcat7-v100-10-12

Force SSL for all applications

原文语言：英语

cis-tomcat7-v100-10-13

Increase the entropy in session identifiers

原文语言：英语

cis-tomcat7-v100-10-14

Do not allow symbolic linking

原文语言：英语

cis-tomcat7-v100-10-15

Do not run applications as privileged

原文语言：英语

cis-tomcat7-v100-10-16

Do not allow cross context requests

原文语言：英语

cis-tomcat7-v100-10-17

Do not resolve hosts on logging valves

原文语言：英语

cis-tomcat7-v100-10-18

Enable memory leak listener

原文语言：英语

cis-tomcat7-v100-10-19

Setting Security Lifecycle Listener

原文语言：英语

cis-tomcat7-v100-10-2

Restrict access to the web administration

原文语言：英语

cis-tomcat7-v100-10-20

use the logEffectiveWebXml and metadata-complete settings for deploying applications in production

原文语言：英语

cis-tomcat7-v100-10-3

Restrict manager application

原文语言：英语

cis-tomcat7-v100-10-4

Force SSL when accessing the manager application

原文语言：英语

cis-tomcat7-v100-10-5

Rename the manager application

原文语言：英语

cis-tomcat7-v100-10-6

Enable strict servlet Compliance

原文语言：英语

cis-tomcat7-v100-10-7

Turn off session façade recycling

原文语言：英语