Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Performance Charts must not enable support for TRACE requests.
Description
Discussion Text
"Trace" is a technique for a user to request internal information about Tomcat. This is useful during product development but should not be enabled in production.
Allowing an attacker to conduct a Trace operation against Performance Charts will expose information that would be useful to perform a more targeted attack. Performance Charts provides the "allowTrace" parameter as a way to disable responding to Trace requests.
Allowing an attacker to conduct a Trace operation against Performance Charts will expose information that would be useful to perform a more targeted attack. Performance Charts provides the "allowTrace" parameter as a way to disable responding to Trace requests.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.