STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

JVM Arguments must be configured for Transport Layer Security (TLS) 1.2 or higher.

DISA Rule

SV-279092r1171584_rule

Vulnerability Number

V-279092

Group Title

SRG-APP-000439-AS-000155

Rule Version

APAS-CF-000860

Severity

CAT I

CCI(s)

• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.

Weight

10

Fix Recommendation

Configure JVM Arguments for TLS.

1. From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

2. In Section JVM Arguments, add the parameter "-Dhttps.protocols" and set the parameter to the TLS versions to be used.

Example: Dhttps.protocols=TLSv1.2,TLSv1.3

3. Select "Submit Changes".

4. Restart ColdFusion for the changes take effect.

Check Contents

Verify JVM Arguments for TLS.

From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

The parameter -Dhttps.protocols is used to set the TLS versions. Valid values for this setting must be TLS versions 1.2 or higher.

Example: Dhttps.protocols=TLSv1.2,TLSv1.3

If the "JVM arguments" setting does not contain the parameter "Dhttps.protocols" or if the parameter "Dhttps.protocols" contains any unapproved protocols or versions, this is a finding.

Vulnerability Number

V-279092

Documentable

False

Rule Version

APAS-CF-000860

Severity Override Guidance

Verify JVM Arguments for TLS.

From the Admin Console Landing Screen, navigate to Server Settings >> Java and JVM.

The parameter -Dhttps.protocols is used to set the TLS versions. Valid values for this setting must be TLS versions 1.2 or higher.

Example: Dhttps.protocols=TLSv1.2,TLSv1.3

If the "JVM arguments" setting does not contain the parameter "Dhttps.protocols" or if the parameter "Dhttps.protocols" contains any unapproved protocols or versions, this is a finding.

Check Content Reference

M

Target Key

5724