STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

The ColdFusion Administrator Console must be hosted on a management network.

DISA Rule

SV-279064r1171544_rule

Vulnerability Number

V-279064

Group Title

SRG-APP-000211-AS-000146

Rule Version

APAS-CF-000420

Severity

CAT II

CCI(s)

• CCI-001082 - Separate user functionality, including user interface services, from system management functionality.

Weight

10

Fix Recommendation

Host the ColdFusion Administrator Console on a management network.

Check Contents

Access the Administrator Console via a web browser. Record the IP address used to reach the console.

Review the network diagram for the site to verify that this IP address belongs to a dedicated management network that is segmented from any public or production networks.

If the Administrator Console is not hosted on a management network separate from the public network, this is a finding.

Vulnerability Number

V-279064

Documentable

False

Rule Version

APAS-CF-000420

Severity Override Guidance

Access the Administrator Console via a web browser. Record the IP address used to reach the console.

Review the network diagram for the site to verify that this IP address belongs to a dedicated management network that is segmented from any public or production networks.

If the Administrator Console is not hosted on a management network separate from the public network, this is a finding.

Check Content Reference

M

Target Key

5724