Securing Apache Tomcat An objective, consensus-driven security guideline for the Apache Tomcat Server Software.
An objective, consensus-driven security guideline for the Apache Tomcat Server Software.
A step-by-step checklist to secure Apache Tomcat:
For Apache Tomcat ( version )
CIS has worked with the community since 2009 to publish a benchmark for Apache Tomcat
Join the Apache Tomcat community
Other CIS Benchmark versions:
For Apache Tomcat (CIS Apache Tomcat 8 Benchmark version 1.0.1)
Ticket
•
15 Oct 2018
‘Remediation’ instructs one to change permissions on file $CATALINA_HOME/conf/catalina.policy to 770
Ticket
•
07 Oct 2018
Information Disclosure - Remove X-Powered-By Headers and Change Server Header
Ticket
•
27 Apr 2018
#10 1.8.4 Ensure secure is set to true only for SSL-enabled Connectors
