CVE ID:	CVE-2015-5188
Description:	Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5188 1033859 http://www.securitytracker.com/id/1033859 RHSA-2015:1904 http://rhn.redhat.com/errata/RHSA-2015-1904.html RHSA-2015:1905 http://rhn.redhat.com/errata/RHSA-2015-1905.html RHSA-2015:1906 http://rhn.redhat.com/errata/RHSA-2015-1906.html RHSA-2015:1907 http://rhn.redhat.com/errata/RHSA-2015-1907.html RHSA-2015:1908 http://rhn.redhat.com/errata/RHSA-2015-1908.html https://bugzilla.redhat.com/show_bug.cgi?id=1252885 https://bugzilla.redhat.com/show_bug.cgi?id=1252885 https://issues.jboss.org/browse/WFCORE-594 https://issues.jboss.org/browse/WFCORE-594