Coldfusion 2018 Update 12 403 forbidden error

Question

We updated Coldfusion 2018 from Update 11 to 12 this week (including query of query hotfix by the Coldfusion Support) and after this some of our servers were not reachable any more (we had to roll back as these are productive servers).

Tomcat outputs HTTP Status 403 - Forbidden.

I searched in the forum and found entries about Update 8 leading to such an error.

But we had installed coldfusion 2018 incl. Update 10 in the beginning and updated to 11 since. So I presume this must be another problem.

Is there any known problem with the current Update 12 and Tomcat?

Priyank Shrivastava. · Accepted Answer

Hi @elisabethf82215657 ,

Once you apply the hotfix, make sure to re-create the connector. Becase there is a new property added after update 7. In case, it is not matching the secret key, it will throw 403 error.

If you have already done the connector and still getting the error, then check the server.xml(\ColdFusion2018\{instance}\runtime\conf) and then search for "secret". In the same line if you have both "secret" and "requiredsecret", please remove the requiredsecret entry and restart the server. It will fix the issue.

BKBK · Answer

I haven't heard of any problem with Update 12 and Tomcat. In fact the upgrade from Update 11 to Update 12 includes a Tomcat upgrade from version 9.0.41 to 9.0.50.

Did you upgrade the connectors after installing Update 12? I think that that is the most likely cause of the 403 - Forbidden response.

See this similar discussion: https://community.adobe.com/t5/coldfusion-discussions/403-forbidden-access-after-installing-update-14/td-p/11464219

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded