CVE ID:	CVE-2015-5178
Description:	The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5178 1033859 http://www.securitytracker.com/id/1033859 RHSA-2015:1904 http://rhn.redhat.com/errata/RHSA-2015-1904.html RHSA-2015:1905 http://rhn.redhat.com/errata/RHSA-2015-1905.html RHSA-2015:1906 http://rhn.redhat.com/errata/RHSA-2015-1906.html RHSA-2015:1907 http://rhn.redhat.com/errata/RHSA-2015-1907.html RHSA-2015:1908 http://rhn.redhat.com/errata/RHSA-2015-1908.html https://bugzilla.redhat.com/show_bug.cgi?id=1250552 https://bugzilla.redhat.com/show_bug.cgi?id=1250552