Remediating Manager Web

Prerequisites

You have obtained the URL and admin account for logging in to FusionInsight Manager.

Procedure

1. Log in to the active OMS node as user omm and back up the $OM_TOMCAT_HOME/bin/catalina.sh file.

   cp $OM_TOMCAT_HOME/bin/catalina.sh /tmp

2. Run the vi $OM_TOMCAT_HOME/bin/catalina.sh command, find the line where Execute The Requested Command is located, and add the following content above the line:

   JAVA_OPTS="$JAVA_OPTS -Dfastjson.parser.safeMode=true"

   

3. Run the following commands on the active OMS node as user omm to restart the Manager Web service:

   $OMS_RUN_PATH/workspace/ha/module/harm/plugin/script/tomcat stop

   $OMS_RUN_PATH/workspace/ha/module/harm/plugin/script/tomcat start

4. Run the following command to check the process on the active OMS node:

   ps -ef |grep tomcat | grep om-server

   If the -Dfastjson.parser.safeMode=true parameter exists, the vulnerability has been mitigated.

   

5. Perform 1 and 2 on the standby OMS node as user omm.