STIGUI
V-259136CAT II — Medium severitySV-259136r1265170_rule

The vCenter UI service host-manager webapp must be removed.

Rule version VCUI-80-000155 · STIG v2 · 2026-08-26

Discussion

Tomcat provides host management functionality through either a default host-manager webapp or through local editing of the configuration files. The host-manager webapp files must be deleted, and administration must be performed through the local editing of the configuration files.

Check

At the command prompt, run the following command:

# ls -l /usr/lib/vmware-vsphere-ui/server/webapps/host-manager

If the host-manager folder exists or contains any content, this is a finding.

Fix

At the command prompt, run the following command:

# rm -rf /usr/lib/vmware-vsphere-ui/server/webapps/host-manager

Identifiers

Group ID
V-259136
Group title
SRG-APP-000141-AS-000095
Rule ID
SV-259136r1265170_rule
Check ID
C-62876r1003679_chk
Fix ID
F-62785r935311_fix