← Back to Apache Tomcat Application Server 9 Security Technical Implementation Guide

V-222958

CAT III (Low)

Example applications must be removed.

Rule ID

SV-222958r960963_rule

STIG

Apache Tomcat Application Server 9 Security Technical Implementation Guide

Version

V3R4

CCIs

CCI-000381

Discussion

Tomcat provides example applications, documentation, and other directories in the default installation which do not serve a production use. These files must be deleted.

Check Content

From the Tomcat server OS type the following command:

sudo ls -l $CATALINA_BASE/webapps/examples. 

If the examples folder exists or contains any content, this is a finding.

Fix Text

From the Tomcat server OS type the following command:

 sudo rm -rf $CATALINA_BASE/webapps/examples