STIGQter: STIG Summary: Adobe ColdFusion 11 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 26 Jan 2018:

ColdFusion must authenticate users individually.

DISA Rule

SV-76941r1_rule

Vulnerability Number

V-62451

Group Title

SRG-APP-000153-AS-000104

Rule Version

CF11-04-000128

Severity

CAT II

CCI(s)

• CCI-000770 - The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed.

Weight

10

Fix Recommendation

Navigate to the "User Manager" page under the "Security" menu. Create users that need access to the Administrator Console providing only the roles necessary to perform each job function.

Check Contents

Within the Administrator Console, navigate to the "User Manager" page under the "Security" menu.

If there are no defined users, this is a finding.

Vulnerability Number

V-62451

Documentable

False

Rule Version

CF11-04-000128

Severity Override Guidance

Within the Administrator Console, navigate to the "User Manager" page under the "Security" menu.

If there are no defined users, this is a finding.

Check Content Reference

M

Target Key

2661

Comments