STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must limit concurrent sessions to the Administrator Console.

DISA Rule

SV-279030r1171489_rule

Vulnerability Number

V-279030

Group Title

SRG-APP-000001-AS-000001

Rule Version

APAS-CF-000001

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure Concurrent Administrator Console Logins.

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. Locate the option labeled "Allow concurrent login sessions for Administrator Console".

3. Disable (uncheck) the option.

4. Select "Submit Changes".

Check Contents

Verify Concurrent Administrator Console Logins.

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. Locate the option labeled "Allow concurrent login sessions for Administrator Console".

If this option is enabled (checked), this is a finding.

Vulnerability Number

V-279030

Documentable

False

Rule Version

APAS-CF-000001

Severity Override Guidance

Verify Concurrent Administrator Console Logins.

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. Locate the option labeled "Allow concurrent login sessions for Administrator Console".

If this option is enabled (checked), this is a finding.

Check Content Reference

M

Target Key

5724