Checklist Summary:

The Adobe ColdFusion Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DOD) information systems. This document is meant for use in conjunction with other STIGs, including appropriate operating system STIGs. This STIG assessment focused on the configuration and security posture of the Adobe ColdFusion application platform deployed within a Microsoft Windows Server environment. The evaluated system leveraged the following architecture and components: • Operating Environment: Microsoft Windows Server. • JVM: Java Virtual Machine configured with customized startup arguments for memory management, secure cryptographic settings, and application performance tuning. • Application Server: Apache Tomcat (bundled with ColdFusion). • Identity Provider (IdP): LDAP-based directory services. • Security Monitoring: Integration with an external Security Information and Event Management (SIEM) solution for centralized logging and alerting.

Checklist Role:

• Business Productivity Application

Known Issues:

Not provided.

Target Audience:

Parties within the DOD and federal government’s computing environments can obtain the applicable STIG from the DOD Cyber Exchange website at https://cyber.mil/. This site contains the latest copies of STIGs, SRGs, and other related security information. Those without a Common Access Card (CAC) that has DOD Certificates can obtain the STIG from https://public.cyber.mil/.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

Department of Defense Instruction 8500.01

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

[email protected]

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Created New Checklist - 01/08/2026

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 01/08/2026