Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
vSphere Client must not enable support for TRACE requests.
Description
Discussion Text
"Trace" is a technique for a user to request internal information about Tomcat. This is useful during product development but should not be enabled in production.
Allowing an attacker to conduct a Trace operation against the Security Token Service will expose information that would be useful to perform a more targeted attack. vSphere Client provides the "allowTrace" parameter as a means to disable responding to Trace requests.
Allowing an attacker to conduct a Trace operation against the Security Token Service will expose information that would be useful to perform a more targeted attack. vSphere Client provides the "allowTrace" parameter as a means to disable responding to Trace requests.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.