CF Security Patches

[Guest]

How can missing security patches for Cold Fusion 8.0.0.176276 be identified?  Want to ensure all security patches are in place.  Thanks

[pete_freitag]

One way is to run http://hackmycf.com/ on it, the paid service does a bit more inspection. The paid service can tell you 100% if you have all security patches for CF 9.0.1 for 8.0.0 it may not find all.

[Guest]

Thanks Pete,

   Are there any tools built into CF that can be used.  The organization that owns the server won't allow tools they have not pre-approved to be used. 

[pete_freitag]

Nothing builtin to CF8 will tell you - the best way to get an idea is to look at the lib\updates folder and see what jar files are in there from that you can determine which patches have been applied (though some patches did not require placing a jar in the updates, they require updating files in CFIDE or elsewhere).  CF10 will have a hotfix updater builtin (you can checkout the public beta now) which will keep track of which have been installed.

[Guest]

Pete, appreciate your assistance. Have great day!