CIS Apache Tomcat 7 - 10.9 Do not allow custom header status messages (Scored)
Profile Applicability
- Level 2
Description
Do not allow custom header status messages
Rationale
See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.
Audit Procedure
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.9 for audit commands.
Remediation
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.9 for remediation steps.
References
- CIS Apache Tomcat 7 Benchmark v1.0.0
Assessment Status
- Scored
- Profile: Level 2