Locking down coldfusion for security threats

Report · Jan 09, 2013

Hi,

We were looking to lockdown our coldfusion server from outside threats and have lookd at multiple forums for it. Most of them were referring to run coldfusion under an unprivileged user account (other than administrator).

Has anyone done similar kind of configuration before as we haven't got any clue how to do this. We will appreciate if someone could write down all the steps to do it.

Thanks

Steve Jordan

http://hyve.com

Report · Jan 09, 2013

Depending on the version you are running, Adobe has lockdown guides for securing ColdFusion.

ColdFusion 10: http://www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/cf10/cf10-lockdown-guide.pdf

ColdFusion 9: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/91025512-cf9-...

They were written for Adobe by Pete Freitag of Foundeo. Pete is a ColdFusion security guru.

-Carl