RHSA-2015:1905High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 update

Published
October 15, 2015
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2015-5178 →CVE-2015-5188 →CVE-2015-5220 →

📋 Description

CVE-2015-5178 — AS/WildFly: missing X-Frame-Options header leading to clickjacking CVE-2015-5188 — EAP: CSRF vulnerability in EAP & WildFly Web Console CVE-2015-5220 — OOME from EAP 6 http management console

🎯 Affected products157

  • Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • apache-cxf-0:2.7.17-1.redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • apache-cxf-0:2.7.17-1.redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • httpserver-0:1.0.5-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • httpserver-0:1.0.5-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-0:5.2.15-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-0:5.2.15-1.Final_redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-cachestore-jdbc-0:5.2.15-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-cachestore-remote-0:5.2.15-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-client-hotrod-0:5.2.15-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • infinispan-core-0:5.2.15-1.Final_redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-aesh-0:0.33.16-1.redhat_1.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-aesh-0:0.33.16-1.redhat_1.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-appclient-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-appclient-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-cli-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-cli-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-client-all-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-client-all-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-clustering-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-clustering-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-cmp-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-cmp-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-configadmin-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-configadmin-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-connector-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-connector-0:7.5.4-2.Final_redhat_4.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-console-0:2.5.10-4.Final_redhat_2.1.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-as-controller-0:7.5.4-2.Final_redhat_4.1.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • +127 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (20)