STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have Central Configuration Server (CCS) disabled.

DISA Rule

SV-279046r1171510_rule

Vulnerability Number

V-279046

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000240

Severity

CAT III

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Disable CCS.

1. From the Admin Console Landing Screen, navigate to Server Settings >> CCS.

2. Select "Disabled" on "CCS Enabled" setting.

3. Select "Submit Changes".

Check Contents

Validate CCS is disabled.

From the Admin Console Landing Screen, navigate to Server Settings >> CCS.

If the "CCS Enabled" is "Enabled", this is a finding.

Vulnerability Number

V-279046

Documentable

False

Rule Version

APAS-CF-000240

Severity Override Guidance

Validate CCS is disabled.

From the Admin Console Landing Screen, navigate to Server Settings >> CCS.

If the "CCS Enabled" is "Enabled", this is a finding.

Check Content Reference

M

Target Key

5724