STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have the CFSTAT feature disabled when not in use.

DISA Rule

SV-279052r1171523_rule

Vulnerability Number

V-279052

Group Title

SRG-APP-000141-AS-000095

Rule Version

APAS-CF-000285

Severity

CAT III

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure the CFSTAT feature.

1. From the Admin Console Landing Screen, navigate to Debug & Logging >> Debug Output Settings.

2. Uncheck "Enable CFSTAT".

3. Select "Submit Changes".

Check Contents

Verify the CFSTAT feature.

From the Admin Console Landing Screen, navigate to Debug & Logging >> Debug Output Settings.

If CFSTAT is not in use and "Enable CFSTAT" is checked, this is a finding.

Vulnerability Number

V-279052

Documentable

False

Rule Version

APAS-CF-000285

Severity Override Guidance

Verify the CFSTAT feature.

From the Admin Console Landing Screen, navigate to Debug & Logging >> Debug Output Settings.

If CFSTAT is not in use and "Enable CFSTAT" is checked, this is a finding.

Check Content Reference

M

Target Key

5724