ColdFusion must protect newly created objects.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-279105 | APAS-CF-001020 | SV-279105r1171428_rule | CCI-000366 | medium |
| Description | ||||
| During operation, ColdFusion may create objects such as files to store parameters or log data, or pipes to share data between objects. When the objects are created, it is important that the newly created object has the correct permissions. This can be performed by assigning the proper umask value to the running process. For the ColdFusion service, the umask must be set to 007 or more restrictive. | ||||
| STIG | Date | |||
| Adobe ColdFusion Security Technical Implementation Guide | 2025-12-19 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · V1R1 · disa_xccdf · related
Details
Check Text (C-279105r1171428_chk)
For ColdFusion running on Windows, this finding is not applicable.
ColdFusion running on Linux:
1. Locate the file "sysinit" in the bin directory under the ColdFusion instance directory. For example, the file could be found at \opt\coldfusion2023\cfusion\bin\sysinit, if the ColdFusion instance directory was \opt\coldfusion2023\cfusion.
2. Edit the "sysinit" file.
3. Locate the umask setting. It must be located near the top of the file, but below the #description comment.
If the umask is not set to 007 or more restrictive, this is a finding.
Fix Text (F-83558r1171427_fix)
For ColdFusion running on Windows, this finding is not applicable.
ColdFusion running on Linux:
1. Locate the file "sysinit" in the bin directory under the ColdFusion instance directory. For example, the file could be found at \opt\coldfusion2023\cfusion\bin\sysinit, if the ColdFusion instance directory was \opt\coldfusion2023\cfusion.
2. Edit the "sysinit" file.
3. Locate the umask setting. It must be located near the top of the file, but below the #description comment.
4. Set umask setting to 007 or more restrictive.
5. Save and close the file.