CIS Apache Tomcat 7 - 4.13 Restrict access to Tomcat tomcat-users.xml (Scored)
Profile Applicability
- Level 1
Description
Restrict access to Tomcat tomcat-users.xml
Rationale
See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.
Audit Procedure
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.13 for audit commands.
Remediation
Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.13 for remediation steps.
References
- CIS Apache Tomcat 7 Benchmark v1.0.0
Assessment Status
- Scored
- Profile: Level 1