STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must log scheduled tasks.

DISA Rule

SV-279035r1171616_rule

Vulnerability Number

V-279035

Group Title

SRG-APP-000097-AS-000060

Rule Version

APAS-CF-000080

Severity

CAT III

CCI(s)

• CCI-000132 - Ensure that audit records containing information that establishes where the event occurred.

Weight

10

Fix Recommendation

Configure ColdFusion to enable logging.

1. From the Admin Console Landing Screen, navigate to Debugging & Logging >> Logging Settings.

2. Check "Enable logging for scheduled tasks".

3. Select "Submit Changes".

Check Contents

Verify Logging is enabled.

From the Admin Console Landing Screen, navigate to Debugging & Logging >> Logging Settings.

If "Enable logging for scheduled tasks" is missing, the Scheduler is not installed, and this is not a finding.

If "Enable logging for scheduled tasks" exists and is not checked, this is a finding.

Vulnerability Number

V-279035

Documentable

False

Rule Version

APAS-CF-000080

Severity Override Guidance

Verify Logging is enabled.

From the Admin Console Landing Screen, navigate to Debugging & Logging >> Logging Settings.

If "Enable logging for scheduled tasks" is missing, the Scheduler is not installed, and this is not a finding.

If "Enable logging for scheduled tasks" exists and is not checked, this is a finding.

Check Content Reference

M

Target Key

5724