STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must protect newly created objects.

DISA Rule

SV-279105r1171428_rule

Vulnerability Number

V-279105

Group Title

SRG-APP-000516-AS-000237

Rule Version

APAS-CF-001020

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

For ColdFusion running on Windows, this finding is not applicable.

ColdFusion running on Linux:
1. Locate the file "sysinit" in the bin directory under the ColdFusion instance directory. For example, the file could be found at \opt\coldfusion2023\cfusion\bin\sysinit, if the ColdFusion instance directory was \opt\coldfusion2023\cfusion.

2. Edit the "sysinit" file.

3. Locate the umask setting. It must be located near the top of the file, but below the #description comment.

4. Set umask setting to 007 or more restrictive.

5. Save and close the file.

Check Contents

For ColdFusion running on Windows, this finding is not applicable.

ColdFusion running on Linux:
1. Locate the file "sysinit" in the bin directory under the ColdFusion instance directory. For example, the file could be found at \opt\coldfusion2023\cfusion\bin\sysinit, if the ColdFusion instance directory was \opt\coldfusion2023\cfusion.

2. Edit the "sysinit" file.

3. Locate the umask setting. It must be located near the top of the file, but below the #description comment.

If the umask is not set to 007 or more restrictive, this is a finding.

Vulnerability Number

V-279105

Documentable

False

Rule Version

APAS-CF-001020

Severity Override Guidance

For ColdFusion running on Windows, this finding is not applicable.

ColdFusion running on Linux:
1. Locate the file "sysinit" in the bin directory under the ColdFusion instance directory. For example, the file could be found at \opt\coldfusion2023\cfusion\bin\sysinit, if the ColdFusion instance directory was \opt\coldfusion2023\cfusion.

2. Edit the "sysinit" file.

3. Locate the umask setting. It must be located near the top of the file, but below the #description comment.

If the umask is not set to 007 or more restrictive, this is a finding.

Check Content Reference

Target Key

5724