STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must limit the default maximum thread count for parallel functions.

DISA Rule

SV-279086r1171032_rule

Vulnerability Number

V-279086

Group Title

SRG-APP-000435-AS-000163

Rule Version

APAS-CF-000800

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure Default Maximum Thread Count For Parallel Functions.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

2. Set "Default Maximum Thread Count For Parallel Functions" to the required amount.

3. Select "Submit Changes".

Check Contents

Verify Default Maximum Thread Count For Parallel Functions settings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

2. Interview the administrator to determine what the default maximum threads are required parallel functions.

If the "Default Maximum Thread Count For Parallel Functions" is set to a number larger than required, this is a finding.

Vulnerability Number

V-279086

Documentable

False

Rule Version

APAS-CF-000800

Severity Override Guidance

Verify Default Maximum Thread Count For Parallel Functions settings.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Settings.

2. Interview the administrator to determine what the default maximum threads are required parallel functions.

If the "Default Maximum Thread Count For Parallel Functions" is set to a number larger than required, this is a finding.

Check Content Reference

M

Target Key

5724