VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide

The VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide (V1 R3) has 32 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

32STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Jul 26 2023 What changed in V1R3

Performance Charts must not be configured with unsupported realms.

VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide

Assessment Title

Rule Text

Performance Charts must not be configured with unsupported realms.

Description

Discussion Text

Performance Charts performs user authentication at the application level and not through Tomcat. Depending on the VCSA version, Performance Charts may come configured with a "UserDatabaseRealm". This should be removed as part of eliminating unnecessary features.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239411

Rule

SV-239411r879587_rule

Severity

medium

Rule Version

VCPF-67-000010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# grep UserDatabaseRealm /usr/lib/vmware-perfcharts/tc-instance/conf/server.xml

If the command produces any output, this is a finding.

Implementation Procedure

Fix Text

Navigate to and open /usr/lib/vmware-perfcharts/tc-instance/conf/server.xml.

Remove the <Realm> node returned in the check.

STIG check 10 of 32 in the VMware vSphere 6.7 Perfcharts Tomcat STIG checklist

← Previous · V-239410Performance Charts must only run one web app.Next · V-239412 →Performance Charts must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.