tc Server VCAC must be configured with memory leak protection.

From VMware vRealize Automation 7.x tc Server Security Technical Implementation Guide

Associated with: CCI-000381

SV-100677r1_rule tc Server VCAC must be configured with memory leak protection.

Vulnerability discussion

The Java Runtime environment can cause a memory leak or lock files under certain conditions. Without memory leak protection, tc Server VCAC can continue to consume system resources that will lead to OutOfMemoryErrors when reloading web applications.Memory leaks occur when JRE code uses the context class loader to load a singleton as this will cause a memory leak if a web application class loader happens to be the context class loader at the time. The JreMemoryLeakPreventionListener class is designed to initialize these singletons when Tomcat's common class loader is the context class loader.Proper use of JRE memory leak protection will ensure that the hosted application does not consume system resources and cause an unstable environment.

Check content

At the command prompt, execute the following command: grep JreMemoryLeakPreventionListener /etc/vcac/server.xml If the JreMemoryLeakPreventionListener node is not listed, this is a finding.

Fix text

Navigate to and open /etc/vcac/server.xml. Navigate to the node. Add '' to the node.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.