STIGQter: STIG Summary: Adobe ColdFusion Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

ColdFusion must include only approved trust anchors in trust stores or certificate stores managed by the organization.

DISA Rule

SV-279112r1171599_rule

Vulnerability Number

V-279112

Group Title

SRG-APP-000910-AS-000300

Rule Version

APAS-CF-001135

Severity

CAT II

CCI(s)

CCI-004909 - Include only approved trust anchors in trust stores or certificate stores managed by the organization.

Weight

Fix Recommendation

Configure connection.

For all untrusted certificates identified execute the following command:
C:\ColdFusion2023\jre\bin\keytool -delete -alias "<certificate alias>" -keystore <keystorefile>

Check Contents

Validate Connection.

1. Open cacert by executing the following command:
C:\ColdFusion2023\jre\bin\keytool -list -keystore C:\ColdFusion2023\jre\lib\security\cacerts

If any outbound certificates listed are not approved, this is a finding.

2. In each ColdFusion instance, open the server.xml file:
<ColdFusion_Installation_Directory>\cfusion\runtime\conf\server.xml

3. Verify all uncommented connector tags for the word "keystorefile":

a. Make note of any keystore path and filename.

b. For each file found with the connector tag "keystorefile", execute the following command:
C:\ColdFusion2023\jre\bin\keytool -list -keystore <keystorefile>

If any inbound certificates listed are not approved, this is a finding.

ColdFusion must include only approved trust anchors in trust stores or certificate stores managed by the organization.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key