Tested on ColdFusion 10, didn't work because of one of these conditions.  Demo:

	[*] 10.0.1.78:8500 Adobe ColdFusion 9 (Apache-Coyote/1.1)
	[-] 10.0.1.78:8500 - No passwords found
	[*] Auxiliary module execution completed

The fingerprinting code by HTP's PoC works pretty well for me. It's done by downloading loginbackground.jpg, and then compares the MD5 of it.  Would you consider that approach?  PoC here:
http://www.exploit-db.com/exploits/25305/