STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must disable all remote and client-side debugging features, including Remote Inspection, Robust Exception Information, AJAX Debug Log Window, and Line Debugging.

DISA Rule

SV-279044r1171508_rule

Vulnerability Number

V-279044

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000220

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.
• CCI-001312 - Generates error messages that provide information necessary for corrective actions without revealing information that could be exploited.

Weight

10

Fix Recommendation

Configure Debugging and Logging settings.

1. From the Admin Console Landing Screen, navigate to Debugging & Logging.

2. In the "Remote Inspection Settings" tab, ensure "Allow Remote Inspection" is unchecked.

3. Select "Submit Changes".

4. In the "Debug Output Settings" tab, ensure "Enable Robust Exception Information" is unchecked.

5. Ensure "Enable AJAX Debug Log Window" is unchecked.

6. Select "Submit Changes".

7. In the Debugger Settings tab, ensure "Allow Line Debugging" is unchecked.

8. Select "Submit Changes".

Check Contents

Validate Debugging and Logging settings.

From the Admin Console Landing Screen, navigate to Debugging & Logging.

In the "Remote Inspection Settings" tab, if "Allow Remote Inspection" is checked, this is a finding.

In the "Debug Output Settings" tab, if "Enable Robust Exception Information" is checked, this is a finding.

If "Enable AJAX Debug Log Window" is checked, this is a finding.

In the "Debugger Settings" tab, if "Allow Line Debugging" is checked, this is a finding.

Vulnerability Number

V-279044

Documentable

False

Rule Version

APAS-CF-000220

Severity Override Guidance

Validate Debugging and Logging settings.

From the Admin Console Landing Screen, navigate to Debugging & Logging.

In the "Remote Inspection Settings" tab, if "Allow Remote Inspection" is checked, this is a finding.

In the "Debug Output Settings" tab, if "Enable Robust Exception Information" is checked, this is a finding.

If "Enable AJAX Debug Log Window" is checked, this is a finding.

In the "Debugger Settings" tab, if "Allow Line Debugging" is checked, this is a finding.

Check Content Reference

M

Target Key

5724