The vCenter UI service example applications must be removed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-259130	VCUI-80-000141	SV-259130r960963_rule		Medium

Description

Tomcat provides example applications, documentation, and other directories in the default installation that do not serve a production use. These files must be deleted.

STIG	Date
VMware vSphere 8.0 vCenter Appliance User Interface (UI) Security Technical Implementation Guide	2024-07-11

Details

Check Text (C-62870r935292_chk)

At the command prompt, run the following command:

# ls -l /usr/lib/vmware-vsphere-ui/server/webapps/examples

If the examples folder exists or contains any content, this is a finding.

Fix Text (F-62779r935293_fix)

At the command prompt, run the following command:

# rm -rf /usr/lib/vmware-vsphere-ui/server/webapps/examples