VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide

The VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide (V1 R4) has 31 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

31STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Jul 26 2023 What changed in V1R4

ESX Agent Manager must only run one webapp.

VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide

Assessment Title

Rule Text

ESX Agent Manager must only run one webapp.

Description

Discussion Text

VMware ships ESX Agent Managers on the VCSA with one webapp. Any other path is potentially malicious and must be removed.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239380

Rule

SV-239380r879584_rule

Severity

medium

Rule Version

VCEM-67-000009

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# ls -A /usr/lib/vmware-eam/web/webapps

Expected result:

eam

If the output does not match the expected result, this is a finding.

Implementation Procedure

Fix Text

For each unexpected directory returned in the check, run the following command:

# rm /usr/lib/vmware-eam/web/webapps/<NAME>

Restart the service with the following command:

# vmon-cli --restart eam

STIG check 9 of 31 in the VMware vSphere 6.7 EAM Tomcat STIG checklist

← Previous · V-239379ESX Agent Manager application files must be verified for their integrity.Next · V-239381 →ESX Agent Manager must not be configured with unsupported realms.