Lucene search
PRIOn knowledge basePRION:CVE-2015-5178HistoryOct 27, 2015 - 4:59 p.m.
Design/Logic Flaw
2015-10-2716:59:00
PRIOn knowledge base
www.prio-n.com
4
The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jboss_enterprise_application_platform | le | 6.4.3 | |
| jboss_wildfly_application_server | le | 2.0.0 |
Related
cve
cve
CVE-2015-5178
2015-10-27 16:59:01
veracode
veracode
Clickjacking
2019-01-15 09:08:01
Denial Of Service
2019-05-02 05:19:10
Cross-site Request Forgery (CSRF)
2019-05-02 05:19:05
nvd
nvd
CVE-2015-5178
2015-10-27 16:59:01
cvelist
cvelist
CVE-2015-5178
2015-10-27 16:00:00
redhat
redhat
openvas
openvas
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2015:1905)
2015-10-16 00:00:00
RHEL 6 : JBoss EAP (RHSA-2015:1907)
2015-10-16 00:00:00
RHEL 7 : JBoss EAP (RHSA-2015:1906)
2018-09-04 00:00:00