STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must allocate log record storage capacity.

DISA Rule

SV-279076r1172835_rule

Vulnerability Number

V-279076

Group Title

SRG-APP-000357-AS-000038

Rule Version

APAS-CF-000610

Severity

CAT III

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

Configure ColdFusion to allocate log record storage capacity that does not exceed the available space on the log directory's storage volume.

1. From the ColdFusion Admin Console landing screen, navigate to Debugging & Logging >> Logging Settings.

2. Review and adjust the following settings:
- Maximum number of archives.
- Maximum file size (in kilobytes).

3. Ensure the calculated total log storage remains within the available storage space of the log directory.

4. Optionally, relocate the log directory to a volume with greater capacity if needed.

5. Save changes and monitor log growth over time to verify compliance.

Check Contents

Review the ColdFusion log configuration to verify sufficient storage is allocated for log records and that log data will not exceed available space.

1. From the ColdFusion Admin Console landing screen, navigate to Debugging & Logging >> Logging Settings.

2. Locate the following settings:
- Log directory: Note the location where logs are written.
- Maximum number of archives: Note the value configured.
- Maximum file size (in kilobytes): Note the value configured.

3. Next, navigate to Debugging & Logging >> Log Files.

4. Count the number of log files currently present.

5. Calculate the total potential storage consumption using the following formula:
(Maximum number of archives) × (Maximum file size in KB) × (Number of log files)

6. Compare this value to the total available space on the storage volume where the log directory resides.

If the calculated potential log storage exceeds the available storage for the log directory, this is a finding.

Vulnerability Number

V-279076

Documentable

False

Rule Version

APAS-CF-000610

Severity Override Guidance

Review the ColdFusion log configuration to verify sufficient storage is allocated for log records and that log data will not exceed available space.

1. From the ColdFusion Admin Console landing screen, navigate to Debugging & Logging >> Logging Settings.

2. Locate the following settings:
- Log directory: Note the location where logs are written.
- Maximum number of archives: Note the value configured.
- Maximum file size (in kilobytes): Note the value configured.

3. Next, navigate to Debugging & Logging >> Log Files.

4. Count the number of log files currently present.

5. Calculate the total potential storage consumption using the following formula:
(Maximum number of archives) × (Maximum file size in KB) × (Number of log files)

6. Compare this value to the total available space on the storage volume where the log directory resides.

If the calculated potential log storage exceeds the available storage for the log directory, this is a finding.

Check Content Reference

M

Target Key

5724