I am running Coldfusion10 on RedHat Linux6. Coldfusion Administration Scheduled Task runs a check for Coldfusion updates every 30days. This month the access_log had the following entry.
xxx.xxx.xxx.xxx - - [16/Feb/2016:12:32:15 -0600] "GET /CFIDE/administrator/updates/task/checkupdates.cfm HTTP/1.1" 403 316 "-" "CFSCHEDULE"
If I run it manually from the Scheduled Task, I see "This scheduled task was completed successfully" message but still see the error in the log.
There is nothing in the application.log
When I click the Updates under Server Update, the hour glass spins for a long time, and it times out with the following error.
Could someone tell me what is wrong?
403 errors indicate "Forbidden" or access denied. Does the service account that ColdFusion is running under have the needed access permissions to the CFIDE folder? Did you apply the Lockdown guide and perhaps miss a step?
Thank you for your reply. I don't know if Lockdown guide has anything to do it, though. This issue started recently and we installed Coldfusion months ago. I will go back to the Lockdown guide for any clue.
Did someone change the permissions on CFIDE or any folder up/down the tree?
I checked the permission on /CFIDE/administrator/updates/task/checkupdates.cfm from CFIDE to the checkupdates.cfm, and nobody has changed the permission.
We restarted the server and everything went back to normal.
Thank you very much for helping us.