Help

OPTIONS and TRACE method enabled on alfresco

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
securityteam
Active Member
‎3 Nov 2022 1:39 PM

OPTIONS and TRACE method enabled on alfresco

Hi all,

I have a question please about HTTP methods in Alfresco GED.

In port 8090 there are TRACE and OPTIONS methods allowed this is considering as vulnerability.

How can we disabled these HTTP methods on Apache tomcat on port 8090 ? 

Best regrds

Reply
3 Replies
securityteam
Active Member
‎8 Nov 2022 0:54 PM

Re: OPTIONS and TRACE method enabled on alfresco

Hi,

Any answer please

0 Kudos
Reply
angelborroy
Alfresco Employee
‎8 Nov 2022 0:57 PM

Re: OPTIONS and TRACE method enabled on alfresco

I typed this search on Google: "apache tomcat disable TRACE OPTIONS"

It gives fine results...

Hyland Developer Evangelist
0 Kudos
Reply
securityteam
Active Member
‎8 Nov 2022 2:25 PM

Re: OPTIONS and TRACE method enabled on alfresco

Thank you for your answer,

i've did this on Google, but it doesn't work, still HTTP methods ( Trace and Options) are enabled on port 8090.

0 Kudos
Reply
Alfresco Content Services Forum

Ask for and offer help to other Alfresco Content Services Users and members of the Alfresco team.

Related links:

We use cookies on this site to enhance your user experience

By using this site, you are agreeing to allow us to collect and use cookies as outlined in Alfresco’s Cookie Statement and Terms of Use (and you have a legitimate interest in Alfresco and our products, authorizing us to contact you in such methods).   If you are not ok with these terms, please do not use this website.