← Back to VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide

V-259079

CAT II (Medium)

The vCenter Perfcharts service must be configured to limit data exposure between applications.

Rule ID

SV-259079r934895_rule

STIG

VMware vSphere 8.0 vCenter Appliance Perfcharts Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001664

Discussion

If RECYCLE_FACADES is true or if a security manager is in use, a new facade object will be created for each request. This reduces the chances that a bug in an application might expose data from one request to another.

Check Content

At the command line, run the following command:

# grep RECYCLE_FACADES /usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties

Example result:

org.apache.catalina.connector.RECYCLE_FACADES=true

If "org.apache.catalina.connector.RECYCLE_FACADES" is not set to "true", this is a finding.

If the "org.apache.catalina.connector.RECYCLE_FACADES" setting does not exist, this is not a finding.

Fix Text

Navigate to and open:

/usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties

Update or remove the following line:

org.apache.catalina.connector.RECYCLE_FACADES=true

Restart the service with the following command:

# vmon-cli --restart perfcharts