VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide

The VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide (V1 R4) has 31 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

31STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Jul 26 2023 What changed in V1R4

ESX Agent Manager must not be configured with unsupported realms.

VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide

Assessment Title

Rule Text

ESX Agent Manager must not be configured with unsupported realms.

Description

Discussion Text

ESX Agent Manager performs authentication at the application level and not through Tomcat. To eliminate unnecessary features and ensure that ESX Agent Manager remains in its shipping state, the lack of a UserDatabaseRealm configuration must be confirmed.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239381

Rule

SV-239381r879587_rule

Severity

medium

Rule Version

VCEM-67-000010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# grep UserDatabaseRealm /usr/lib/vmware-eam/web/conf/server.xml

If the command produces any output, this is a finding.

Implementation Procedure

Fix Text

Navigate to and open: 

/usr/lib/vmware-eam/web/conf/server.xml 

Remove the <Realm> node returned in the check.

STIG check 10 of 31 in the VMware vSphere 6.7 EAM Tomcat STIG checklist

← Previous · V-239380ESX Agent Manager must only run one webapp.Next · V-239382 →ESX Agent Manager must be configured to limit access to internal packages.