Cis Tomcat7 V100 10.9

Do not allow custom header status messages

cyberstrikeus Updated

File contents

CIS Apache Tomcat 7 - 10.9 Do not allow custom header status messages (Scored)

Profile Applicability

  • Level 2

Description

Do not allow custom header status messages

Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.9 for audit commands.

Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 10.9 for remediation steps.

References

  • CIS Apache Tomcat 7 Benchmark v1.0.0

Assessment Status

  • Scored
  • Profile: Level 2

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_7_Benchmark_v1.0.0/cis-tomcat7-v100-10.9 commit 5e88c964b6

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-tomcat7-v100-10-9