STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must store only encrypted representations of passwords.

DISA Rule

SV-279057r1171529_rule

Vulnerability Number

V-279057

Group Title

SRG-APP-000171-AS-000119

Rule Version

APAS-CF-000335

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure Proxy Settings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

2. Clear the "Proxy Host", Proxy UserName", and "Proxy Password" fields.

3. Select "Submit Changes".

Check Contents

Verify Proxy Settings.

From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

If a "Proxy Host" is provided with a "Proxy Username" and "Proxy Password", this is a finding.

Vulnerability Number

V-279057

Documentable

False

Rule Version

APAS-CF-000335

Severity Override Guidance

Verify Proxy Settings.

From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

If a "Proxy Host" is provided with a "Proxy Username" and "Proxy Password", this is a finding.

Check Content Reference

Target Key

5724