Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Access to Tomcat manager application must be restricted.
Description
Discussion Text
The Tomcat manager application is used to manage the Tomcat server and the applications that run on Tomcat. By default, the manager application is only accessible via the localhost. Exposing the management application to any network interface that is available to non-administrative personnel leaves the Tomcat server vulnerable to attempts to access the management application. To mitigate this risk, the management application should only be run on the localhost or on network interfaces tied to a dedicated management network.
This setting is managed in the $CATALINA_BASE/conf/server.xml file.
This setting is managed in the $CATALINA_BASE/conf/server.xml file.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.