Test ID:	1.3.6.1.4.1.25623.1.0.810320
Category:	Web application abuses
Title:	Red Hat JBoss Enterprise Application Platform (EAP) < 6.4.4 Multiple Vulnerabilities
Summary:	Red Hat JBoss Enterprise Application Platform (EAP) is prone to; multiple vulnerabilities.
Description:	Summary: Red Hat JBoss Enterprise Application Platform (EAP) is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - The EAP console does not set the X-Frame-Options HTTP header. - The web Console does not properly validate a file upload using a multipart/form-data submission. - A Java OutOfMemoryError in the HTTP management interface while sending requests containing large headers to Web Console. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct clickjacking attack, to cause a denial of service, and hijack the authentication of administrators for requests that make arbitrary changes to an instance and to read arbitrary files. Affected Software/OS: Red Hat JBoss EAP versions before 6.4.4. Solution: Update to version 6.4.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5220 1033859 http://www.securitytracker.com/id/1033859 RHSA-2015:1904 http://rhn.redhat.com/errata/RHSA-2015-1904.html RHSA-2015:1905 http://rhn.redhat.com/errata/RHSA-2015-1905.html RHSA-2015:1906 http://rhn.redhat.com/errata/RHSA-2015-1906.html RHSA-2015:1907 http://rhn.redhat.com/errata/RHSA-2015-1907.html RHSA-2015:1908 http://rhn.redhat.com/errata/RHSA-2015-1908.html RHSA-2016:1519 http://rhn.redhat.com/errata/RHSA-2016-1519.html https://bugzilla.redhat.com/show_bug.cgi?id=1255597 Common Vulnerability Exposure (CVE) ID: CVE-2015-5188 https://bugzilla.redhat.com/show_bug.cgi?id=1252885 https://issues.jboss.org/browse/WFCORE-594 Common Vulnerability Exposure (CVE) ID: CVE-2015-5178 https://bugzilla.redhat.com/show_bug.cgi?id=1250552
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.