STIGQter: STIG Summary: Apache Tomcat Application Sever 9 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

Documentation must be removed.

DISA Rule

SV-222960r615938_rule

Vulnerability Number

V-222960

Group Title

SRG-APP-000141-AS-000095

Rule Version

TCAT-AS-000580

Severity

CAT III

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

From the Tomcat server OS type the following command:

sudo rm -rf $CATALINA_BASE/webapps/docs

Check Contents

From the Tomcat server OS type the following command:

sudo ls -l $CATALINA_BASE/webapps/docs.

If the docs folder exists or contains any content, this is a finding.

Vulnerability Number

V-222960

Documentable

False

Rule Version

TCAT-AS-000580

Severity Override Guidance

From the Tomcat server OS type the following command:

sudo ls -l $CATALINA_BASE/webapps/docs.

If the docs folder exists or contains any content, this is a finding.

Check Content Reference

M

Target Key

4094

Comments