The vCenter STS service must be configured to limit data exposure between applications.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-258979 | SRG-APP-000223-AS-000150 | VCST-80-000057 | SV-258979r961116_rule | 2024-07-11 | 2 |
| Description |
|---|
| If RECYCLE_FACADES is true or if a security manager is in use, a new facade object will be created for each request. This reduces the chances that a bug in an application might expose data from one request to another. |
| ℹ️ Check |
|---|
| At the command line, run the following command: # grep RECYCLE_FACADES /usr/lib/vmware-sso/vmware-sts/conf/catalina.properties Example result: org.apache.catalina.connector.RECYCLE_FACADES=true If "org.apache.catalina.connector.RECYCLE_FACADES" is not set to "true", this is a finding. If the "org.apache.catalina.connector.RECYCLE_FACADES" setting does not exist, this is not a finding. |
| ✔️ Fix |
|---|
| Navigate to and open: /usr/lib/vmware-sso/vmware-sts/conf/catalina.properties Update or remove the following line: org.apache.catalina.connector.RECYCLE_FACADES=true Restart the service with the following command: # vmon-cli --restart sts |