You have to add Valve under Server/Service/Engine/Host/ Works for us as expected
On Wed, 19 Dec 2018 at 03:17, <danyaal.ha...@bcbssc.com> wrote: > Added following to the Server.xml, still showing in the latest scan. > > <Valve className="org.apache.catalina.valves.ErrorReportValve" > showReport=false" showServerInfo="false" /> > > Thank you, > Danyaal > > -----Original Message----- > From: John Palmer [mailto:johnpalm...@gmail.com] > Sent: Friday, December 14, 2018 6:26 PM > To: Tomcat Users List > Subject: [EXTERNAL] Re: tomcat Finding! > > WARNING:This is an external email that originated outside of our email > system. DO NOT CLICK links or open attachments unless you recognize the > sender and know that the content is safe! > > I found this to be easier to accomplish (and maintain): > > add to the Host section of server.xml: > <Valve className="org.apache.catalina.valves.ErrorReportValve" > showReport=false" showServerInfo="false" /> > > (this will disable the tomcat version number and the stacktrace - the > defaults for these are "true") > > > On Fri, Dec 14, 2018 at 10:18 AM <danyaal.ha...@bcbssc.com> wrote: > > > Good Morning, > > I'm encountering following scan finding errors and couldn't find way to > > mitigate this. > > > > Tomcat 8.5.32 > > 12085 > > Apache Tomcat Default Files > > The following default files were found > > :/nessus-check/default-404-error-page.html > > Delete the default index page and remove the example JSP and servlets. > > Follow the Tomcat or OWASP instructions to replace or modify the default > > error page. > > > > Thank you, > > Danyaal > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > > For additional commands, e-mail: users-h...@tomcat.apache.org > > > > > -- WBR Maxim aka solomax
