OPTIONS and TRACE method enabled on alfresco

cancel
Showing results for 
Search instead for 
Did you mean: 
securityteam
Active Member

OPTIONS and TRACE method enabled on alfresco

Hi all,

I have a question please about HTTP methods in Alfresco GED.

In port 8090 there are TRACE and OPTIONS methods allowed this is considering as vulnerability.

How can we disabled these HTTP methods on Apache tomcat on port 8090 ? 

Best regrds

3 Replies
securityteam
Active Member

Re: OPTIONS and TRACE method enabled on alfresco

Hi,

Any answer please

angelborroy
Alfresco Employee

Re: OPTIONS and TRACE method enabled on alfresco

I typed this search on Google: "apache tomcat disable TRACE OPTIONS"

It gives fine results...

Hyland Developer Evangelist
securityteam
Active Member

Re: OPTIONS and TRACE method enabled on alfresco

Thank you for your answer,

i've did this on Google, but it doesn't work, still HTTP methods ( Trace and Options) are enabled on port 8090.