Navigate

Adobe ColdFusion 11 STIG

Adobe ColdFusion 11 Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
CF11-03-000113	V-237182	ColdFusion must protect newly created objects.	Cat II
CF11-03-000114	V-237183	ColdFusion must have Sandbox Security enabled.	Cat II
CF11-03-000115	V-237184	ColdFusion must have Sandboxes defined for application execution.	Cat II
CF11-03-000116	V-237185	ColdFusion must have the Default ScriptSrc Directory set to a non-default value.	Cat II
CF11-03-000117	V-237186	Unsupported versions of ColdFusion must be uninstalled or upgraded	Cat I
CF11-03-000118	V-237187	ColdFusion must have example collections removed.	Cat II
CF11-03-000119	V-237188	ColdFusion must have example gateway instances removed.	Cat II
CF11-04-000128	V-237189	ColdFusion must authenticate users individually.	Cat II
CF11-04-000129	V-237190	ColdFusion must provide security extensions to extend the SOAP protocol and provide secure authentication when accessing sensitive data.	Cat II
CF11-04-000133	V-237191	ColdFusion must transmit only encrypted representations of passwords for Flex Integration.	Cat II
CF11-04-000134	V-237192	The ColdFusion Administrator Console must transmit only encrypted representations of passwords.	Cat II
CF11-04-000135	V-237193	ColdFusion must transmit only encrypted representations of passwords to the mail server.	Cat II
CF11-04-000138	V-237194	Only authenticated system administrators or the designated PKI Sponsor for ColdFusion must have access to ColdFusions private key.	Cat II
CF11-05-000161	V-237195	The ColdFusion Administrator Console must be hosted on a management network.	Cat II
CF11-05-000162	V-237196	The ColdFusion Administrator Console must be hosted in a management sandbox.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.