Docker Found in AWS ColdFusion 2021 AMI – CVE Concerns and Safe Removal?

[hoang_0663]

Hi everyone,

I've been working with the Adobe ColdFusion 2021 AMI on AWS (Windows) and noticed that Docker is installed by default. However, the ColdFusion documentation and AWS Marketplace listing don’t mention Docker as a requirement or dependency.

While scanning the instance for security vulnerabilities, we identified two Docker-related CVEs:

• CVE-2021-21184

• CVE-2021-21185

These are medium to high severity issues affecting Docker Desktop.

Questions:

1. Is Docker required for ColdFusion to run properly on this AMI?

2. Can I safely uninstall Docker without impacting ColdFusion functionality?

3. If Docker is required, can I safely upgrade it to the latest patched version?

I’d appreciate any clarification or official guidance. I want to ensure we maintain a secure and minimal environment without removing something critical to the ColdFusion runtime.

Thanks in advance for your help!

Best,

[hoang_0663]

Updated to correct CVE-2021-21284 and CVE-2021-21285