AWI Jetty Vulnerability disable HTTP OPTIONS Method Enabled

[BEN BAEZ]

Hello Community,

     Has anyone found out how to properly disable HTTP Options on the Jetty web interface that comes with Automic? I can find it for about every other interface except this one. I've tried adding security restraints in the uc4config.xml but this hasn't worked to remedy the vulnerability. Thanks for any input.

Ben

-------------------------------------------

[Daryl Brown]

I'm very interested in the answer to this, too.  We have our AWI running with an https:// URL, but the http:// address is still working too.

I've emailed Broadcom support about this (related to some other AWI/Jetty questions) but am still awaiting on response on this.

-------------------------------------------