Tomcat STIG Rules: Vuln ID: V-222926, Vuln ID: V-222973: Manager Application

Products

• CA Spectrum

Issue/Introduction

'TCAT-AS-000010 - The number of allowed simultaneous sessions to the manager application must be limited.' (Vuln ID: V-222926)

'TCAT-AS-000820 - Tomcat must be configured to limit data exposure between applications.' (Vuln ID: V-222973)

 

 

Environment

Release : 21.2

 

Resolution

DX Netops Spectrum does not ship the Manager application.  These vulnerabilities/findings/STIG requirements are not applicable.

Additional Information

V-222926 - The number of allowed simultaneous sessions to the manager application must be limited.
https://stigviewer.com/stig/apache_tomcat_application_sever_9/2020-12-11/finding/V-222926

V-222973 - Tomcat must be configured to limit data exposure between applications.
https://stigviewer.com/stig/apache_tomcat_application_sever_9/2020-12-11/finding/V-222973