Cis Tomcat7 V100 4.14

---
name: cis-tomcat7-v100-4.14
description: "Restrict access to Tomcat web.xml"
category: cis-tomcat
version: "1.0.0"
author: cyberstrike-official
tags: [cis, tomcat, tomcat-7, file-permissions]
cis_id: "4.14"
cis_benchmark: "CIS Apache Tomcat 7 Benchmark v1.0.0"
tech_stack: [tomcat, java]
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: {}
---

# CIS Apache Tomcat 7 - 4.14 Restrict access to Tomcat web.xml (Scored)

## Profile Applicability

- Level 1

## Description

Restrict access to Tomcat web.xml

## Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

## Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.14 for audit commands.

## Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.14 for remediation steps.

## References

- CIS Apache Tomcat 7 Benchmark v1.0.0

## Assessment Status

- **Scored**
- **Profile**: Level 1