STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have example services removed.

DISA Rule

SV-279043r1171348_rule

Vulnerability Number

V-279043

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000205

Severity

CAT III

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Remove Sample Services.

1. From the Admin Console Landing Screen, navigate to Data & Services.

a. In the Data Sources tab, delete the data sources cfartgallery, cfbookclub, cfcodeexplorer, and cfdocexamples.

b. In the ColdFusion Collections tab, delete the bookclub collection.

c. In the GraphQL tab, delete the service "myservice" with the path "https://apollo-fullstack-tutorial.herokuapp.com/graphql".

2. Navigate to Event Gateways.

a. In the Gateway Instances tab, delete the Gateway Instance SMS Menu App.

Check Contents

Verify Sample Services have been removed.

1. From the Admin Console Landing Screen, navigate to Data & Services.

In the Data Sources tab, if the data sources cfartgallery, cfbookclub, cfcodeexplorer, or cfdocexamples exist, this is a finding.

In the ColdFusion Collections tab, if the bookclub collection exists, this is a finding.

In the GraphQL tab, if the service "myservice" with the path " https://apollo-fullstack-tutorial.herokuapp.com/graphql" exists, this is a finding.

2. Navigate to Event Gateways.

In the Gateway Instances tab, if the Gateway Instance SMS Menu App exists, this is a finding.

Vulnerability Number

V-279043

Documentable

False

Rule Version

APAS-CF-000205

Severity Override Guidance

Verify Sample Services have been removed.

1. From the Admin Console Landing Screen, navigate to Data & Services.

In the Data Sources tab, if the data sources cfartgallery, cfbookclub, cfcodeexplorer, or cfdocexamples exist, this is a finding.

In the ColdFusion Collections tab, if the bookclub collection exists, this is a finding.

In the GraphQL tab, if the service "myservice" with the path " https://apollo-fullstack-tutorial.herokuapp.com/graphql" exists, this is a finding.

2. Navigate to Event Gateways.

In the Gateway Instances tab, if the Gateway Instance SMS Menu App exists, this is a finding.

Check Content Reference

M

Target Key

5724