STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must require enforced authentication.

DISA Rule

SV-279032r1171325_rule

Vulnerability Number

V-279032

Group Title

SRG-APP-000080-AS-000045

Rule Version

APAS-CF-000035

Severity

CAT II

CCI(s)

• CCI-000166 - Provide irrefutable evidence that an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

Weight

10

Fix Recommendation

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. Select "Separate user name and password authentication (allows multiple users)".

3. Select "Submit Changes".

Check Contents

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. If the "Separate user name and password authentication (allows multiple users)" is not selected, this is a finding.

Vulnerability Number

V-279032

Documentable

False

Rule Version

APAS-CF-000035

Severity Override Guidance

1. From the Admin Console Landing Screen, navigate to Security >> Administrator.

2. If the "Separate user name and password authentication (allows multiple users)" is not selected, this is a finding.

Check Content Reference

M

Target Key

5724