STIGQter: STIG Summary: Adobe ColdFusion 11 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 26 Jan 2018:

ColdFusion must disable auto reloading of configuration files on file changes.

DISA Rule

SV-76919r1_rule

Vulnerability Number

V-62429

Group Title

SRG-APP-000380-AS-000088

Rule Version

CF11-03-000108

Severity

CAT II

CCI(s)

• CCI-001813 - The information system enforces access restrictions.

Weight

10

Fix Recommendation

Navigate to the "Settings" page under the "Server Settings" menu. Uncheck "Check configuration files for changes every" and select the "Submit Changes" button.

Check Contents

Within the Administrator Console, navigate to the "Settings" page under the "Server Settings" menu.

If "Check configuration files for changes every" is checked, this is a finding.

Vulnerability Number

V-62429

Documentable

False

Rule Version

CF11-03-000108

Severity Override Guidance

Within the Administrator Console, navigate to the "Settings" page under the "Server Settings" menu.

If "Check configuration files for changes every" is checked, this is a finding.

Check Content Reference

M

Target Key

2661

Comments