Copy link to clipboard
Copied
How can I hide the version of coldfusion being shown from the coldfusion administrator login page? Right now I have the Version: 6,1,0,83762 showing.
Copy link to clipboard
Copied
Why would you want to? You can't change the default login file that ships with CF, but you could write your own form and just submit it to the same URL, and use that instead.
But why would you want to do this?
--
Adam
Copy link to clipboard
Copied
For security reasons.
If there are known vulnerabilities with a specific version of a software release, you don't want to have someone who is scanning to be able to pull that information and then be able to try known attacks that will increase their chances of compromising your site/application.
Copy link to clipboard
Copied
I'd suggest following the lockdown guides for ColdFusion and protecting the CF Administrator using web server security. Then this screen can't even be seen without appropriate credentials being provided first.
-Carl V.
Find more inspiration, events, and resources on the new Adobe Community
Explore Now