I found this to be easier to accomplish (and maintain): add to the Host section of server.xml: <Valve className="org.apache.catalina.valves.ErrorReportValve" showReport=false" showServerInfo="false" />
(this will disable the tomcat version number and the stacktrace - the defaults for these are "true") On Fri, Dec 14, 2018 at 10:18 AM <danyaal.ha...@bcbssc.com> wrote: > Good Morning, > I'm encountering following scan finding errors and couldn't find way to > mitigate this. > > Tomcat 8.5.32 > 12085 > Apache Tomcat Default Files > The following default files were found > :/nessus-check/default-404-error-page.html > Delete the default index page and remove the example JSP and servlets. > Follow the Tomcat or OWASP instructions to replace or modify the default > error page. > > Thank you, > Danyaal > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
