STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance Lookup Service Security Technical Implementation Guide

Version: 1

Release: 1 Benchmark Date: 31 Oct 2023

CheckedNameTitle
SV-259037r934769_ruleThe vCenter Lookup service must limit the number of maximum concurrent connections permitted.
SV-259038r934772_ruleThe vCenter Lookup service cookies must have secure flag set.
SV-259039r934775_ruleThe vCenter Lookup service must initiate session logging upon startup.
SV-259040r934778_ruleThe vCenter Lookup service must produce log records containing sufficient information regarding event details.
SV-259041r934781_ruleThe vCenter Lookup service logs folder permissions must be set correctly.
SV-259042r934784_ruleThe vCenter Lookup service must limit privileges for creating or modifying hosted application shared files.
SV-259043r934787_ruleThe vCenter Lookup service must disable stack tracing.
SV-259044r934790_ruleThe vCenter Lookup service must be configured to use a specified IP address and port.
SV-259045r934793_ruleThe vCenter Lookup service must be configured to limit data exposure between applications.
SV-259046r934796_ruleThe vCenter Lookup service must be configured to fail to a known safe state if system initialization fails.
SV-259047r934799_ruleThe vCenter Lookup service must set URIEncoding to UTF-8.
SV-259048r934802_ruleThe vCenter Lookup service "ErrorReportValve showServerInfo" must be set to "false".
SV-259049r934805_ruleThe vCenter Lookup service must set an inactive timeout for sessions.
SV-259050r934808_ruleThe vCenter Lookup service must offload log records onto a different system or media from the system being logged.
SV-259051r934811_ruleThe vCenter Lookup service must enable "STRICT_SERVLET_COMPLIANCE".
SV-259052r934814_ruleThe vCenter Lookup service must limit the amount of time that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259053r934817_ruleThe vCenter Lookup service must limit the number of times that each Transmission Control Protocol (TCP) connection is kept alive.
SV-259054r934820_ruleThe vCenter Lookup service must configure the "setCharacterEncodingFilter" filter.
SV-259055r934823_ruleThe vCenter Lookup service cookies must have "http-only" flag set.
SV-259056r934826_ruleThe vCenter Lookup service DefaultServlet must be set to "readonly" for "PUT" and "DELETE" commands.
SV-259057r934829_ruleThe vCenter Lookup service shutdown port must be disabled.
SV-259058r934832_ruleThe vCenter Lookup service debug parameter must be disabled.
SV-259059r934835_ruleThe vCenter Lookup service directory listings parameter must be disabled.
SV-259060r934838_ruleThe vCenter Lookup service deployXML attribute must be disabled.
SV-259061r934841_ruleThe vCenter Lookup service must have Autodeploy disabled.
SV-259062r934844_ruleThe vCenter Lookup service xpoweredBy attribute must be disabled.
SV-259063r934847_ruleThe vCenter Lookup service example applications must be removed.
SV-259064r934850_ruleThe vCenter Lookup service default ROOT web application must be removed.
SV-259065r934853_ruleThe vCenter Lookup service default documentation must be removed.
SV-259066r934856_ruleThe vCenter Lookup service files must have permissions in an out-of-the-box state.
SV-259067r934859_ruleThe vCenter Lookup service must disable "ALLOW_BACKSLASH".
SV-259068r934862_ruleThe vCenter Lookup service must enable "ENFORCE_ENCODING_IN_GET_WRITER".
SV-259069r934865_ruleThe vCenter Lookup service manager webapp must be removed.
SV-259070r934868_ruleThe vCenter Lookup service host-manager webapp must be removed.