Documentation must be removed.

Tomcat provides documentation and other directories in the default installation which do not serve a production use. These files must be deleted.

From the Tomcat server OS type the following command:

sudo ls -l $CATALINA_BASE/webapps/docs.

If the docs folder exists or contains any content, this is a finding.

From the Tomcat server OS type the following command:

sudo rm -rf $CATALINA_BASE/webapps/docs