topic OPTIONS and TRACE method enabled on alfresco in Alfresco Forum

OPTIONS and TRACE method enabled on alfresco

securityteam — Thu, 03 Nov 2022 13:39:59 GMT

Hi all,

I have a question please about HTTP methods in Alfresco GED.

In port 8090 there are TRACE and OPTIONS methods allowed this is considering as vulnerability.

How can we disabled these HTTP methods on Apache tomcat on port 8090 ?

Best regrds

securityteam — Tue, 08 Nov 2022 12:54:05 GMT

Hi,

Any answer please

angelborroy — Tue, 08 Nov 2022 12:57:36 GMT

I typed this search on Google: "apache tomcat disable TRACE OPTIONS"

It gives fine results...

securityteam — Tue, 08 Nov 2022 14:25:12 GMT

Thank you for your answer,

i've did this on Google, but it doesn't work, still HTTP methods ( Trace and Options) are enabled on port 8090.