UCF STIG Viewer Logo

vSphere UI must limit the number of allowed connections.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239699 VCUI-67-000018 SV-239699r679203_rule Medium
Description
Limiting the number of established connections is a basic denial-of-service protection and a best practice. Servers where the limit is too high or unlimited can potentially run out of system resources and negatively affect system availability.
STIG Date
VMware vSphere 6.7 UI Tomcat Security Technical Implementation Guide 2022-01-03

Details

Check Text ( C-42932r679201_chk )
At the command prompt, execute the following command:

# xmllint --format /usr/lib/vmware-vsphere-ui/server/conf/server.xml | sed '2 s/xmlns=".*"//g' | xmllint --xpath '/Server/Service/Connector[@port="${http.port}"]/@acceptCount' -

Expected result:

acceptCount="300"

If the output does not match the expected result, this is a finding.
Fix Text (F-42891r679202_fix)
Navigate to and open /usr/lib/vmware-vsphere-ui/server/conf/server.xml.

Navigate to the configured with port="${http.port}".

Add or change the following value:

acceptCount="300"