RHSA-2015:1907High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 jboss-ec2-eap update

Published
October 15, 2015
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2015-5178 →CVE-2015-5188 →CVE-2015-5220 →

📋 Description

CVE-2015-5178 — AS/WildFly: missing X-Frame-Options header leading to clickjacking CVE-2015-5188 — EAP: CSRF vulnerability in EAP & WildFly Web Console CVE-2015-5220 — OOME from EAP 6 http management console

🎯 Affected products4

  • Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-ec2-eap-0:7.5.4-1.Final_redhat_4.ep6.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
  • jboss-ec2-eap-samples-0:7.5.4-1.Final_redhat_4.ep6.el6.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. Also, make sure to back up any modified configuration files, deployments, and all user data. After applying the update, restart the instance of Red Hat JBoss Enterprise Application Platform for the changes to take effect. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (7)