STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion Backup Directory must be deleted.

DISA Rule

SV-279099r1172837_rule

Vulnerability Number

V-279099

Group Title

SRG-APP-000454-AS-000268

Rule Version

APAS-CF-000930

Severity

CAT II

CCI(s)

• CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

10

Fix Recommendation

Remove Update Backups.

1. Navigate to C:\ColdFusion2023\cfusion\hf-updates.

2. Remove any backups from hf-updates.

Check Contents

Verify Update Backup Directory has been deleted.

Navigate to C:\ColdFusion2023\cfusion\hf-updates.

If any backup directories exist in the "hf-updates" folder, this is a finding.

Note: Do not remove the backup directory for an update until the update has been tested and verified that the ColdFusion server is operating correctly.

Vulnerability Number

V-279099

Documentable

False

Rule Version

APAS-CF-000930

Severity Override Guidance

Verify Update Backup Directory has been deleted.

Navigate to C:\ColdFusion2023\cfusion\hf-updates.

If any backup directories exist in the "hf-updates" folder, this is a finding.

Note: Do not remove the backup directory for an update until the update has been tested and verified that the ColdFusion server is operating correctly.

Check Content Reference

M

Target Key

5724