STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must have CFIDE blocked in the uriworkermap.properties file.

DISA Rule

SV-279111r1171107_rule

Vulnerability Number

V-279111

Group Title

SRG-APP-000516-AS-000237

Rule Version

APAS-CF-001105

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the "uriworkermap.properties: file.

1. Locate the ColdFusion install folder under the config\wsconfig\<number> folders.

2. Open and edit the "uriworkermap.properties" file and add the line:
!/CFIDE* = cfusion

3. Save the file.

Check Contents

Verify the "uriworkermap.properties: file.

1. Locate the ColdFusion install folder under the config\wsconfig\<number> folders.

2. Review the "uriworkermap.properties" files for a line that matches this:
!/CFIDE* = cfusion

If the line is not found, this is a finding.

Vulnerability Number

V-279111

Documentable

False

Rule Version

APAS-CF-001105

Severity Override Guidance

Verify the "uriworkermap.properties: file.

1. Locate the ColdFusion install folder under the config\wsconfig\<number> folders.

2. Review the "uriworkermap.properties" files for a line that matches this:
!/CFIDE* = cfusion

If the line is not found, this is a finding.

Check Content Reference

M

Target Key

5724