Cis Tomcat7 V100 4.7

---
name: cis-tomcat7-v100-4.7
description: "Restrict access to Tomcat web application directory"
category: cis-tomcat
version: "1.0.0"
author: cyberstrike-official
tags: [cis, tomcat, tomcat-7, file-permissions]
cis_id: "4.7"
cis_benchmark: "CIS Apache Tomcat 7 Benchmark v1.0.0"
tech_stack: [tomcat, java]
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: {}
---

# CIS Apache Tomcat 7 - 4.7 Restrict access to Tomcat web application directory (Scored)

## Profile Applicability

- Level 1

## Description

Restrict access to Tomcat web application directory

## Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

## Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.7 for audit commands.

## Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 4.7 for remediation steps.

## References

- CIS Apache Tomcat 7 Benchmark v1.0.0

## Assessment Status

- **Scored**
- **Profile**: Level 1