Skip to main content
Participating Frequently
January 9, 2013
Question

Locking down coldfusion for security threats

  • January 9, 2013
  • 1 reply
  • 1162 views

Hi,

We were looking to lockdown our coldfusion server from outside threats and have lookd at multiple forums for it. Most of them were referring to run coldfusion under an unprivileged user account (other than administrator).

Has anyone done similar kind of configuration before as we haven't got any clue how to do this. We will appreciate if someone could write down all the steps to do it.

Thanks

Steve Jordan

http://hyve.com

    This topic has been closed for replies.

    1 reply

    Carl Von Stetten
    Legend
    January 9, 2013

    Depending on the version you are running, Adobe has lockdown guides for securing ColdFusion.

    ColdFusion 10: http://www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/cf10/cf10-lockdown-guide.pdf

    ColdFusion 9: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/91025512-cf9-lockdownguide-wp-ue.pdf

    They were written for Adobe by Pete Freitag of Foundeo.  Pete is a ColdFusion security guru.

    -Carl