PRIOn knowledge basePRION:CVE-2015-5220Cross site request forgery (csrf)
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.022 Low
EPSS
Percentile
89.2%
The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers to cause a denial of service (memory consumption) via a large request header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jboss_enterprise_application_platform | le | 6.4.3 | |
| jboss_wildfly_application_server | le | 2.0.0 |
References
rhn.redhat.com/errata/RHSA-2015-1904.html
rhn.redhat.com/errata/RHSA-2015-1905.html
rhn.redhat.com/errata/RHSA-2015-1906.html
rhn.redhat.com/errata/RHSA-2015-1907.html
rhn.redhat.com/errata/RHSA-2015-1908.html
rhn.redhat.com/errata/RHSA-2016-1519.html
www.securitytracker.com/id/1033859
bugzilla.redhat.com/show_bug.cgi?id=1255597
Related
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.022 Low
EPSS
Percentile
89.2%