what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2015-1907-01

Posted Oct 16, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-1907-01 - Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was discovered that sending requests containing large headers to the Web Console produced a Java OutOfMemoryError in the HTTP management interface. An attacker could use this flaw to cause a denial of service. It was discovered that the EAP Management Console could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console.

tags | advisory, java, web, denial of service, arbitrary

systems | linux, redhat

advisories | CVE-2015-5178, CVE-2015-5188, CVE-2015-5220

SHA-256 | eb927aee644dfa05c9e682753edffe2f99a92f01c18d732cc2610d84730383f9

Download | Favorite | View

Related Files

No related files