Vulnerability Details : CVE-2015-5188
Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.
Vulnerability category: Cross-site request forgery (CSRF)
Products affected by CVE-2015-5188
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_wildfly_application_server:*:cr8:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-5188
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 49 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-5188
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
CWE ids for CVE-2015-5188
-
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-5188
-
http://rhn.redhat.com/errata/RHSA-2015-1904.html
RHSA-2015:1904 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1905.html
RHSA-2015:1905 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1908.html
Red Hat Customer PortalVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1906.html
RHSA-2015:1906 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1252885
1252885 – (CVE-2015-5188, WFLY-2913) CVE-2015-5188 JBoss EAP: CSRF vulnerability in EAP & WildFly Web ConsoleVendor Advisory
-
https://issues.jboss.org/browse/WFCORE-594
[WFCORE-594] CSRF vulnerability in the WFLY-2913 solution - JBoss Issue TrackerVendor Advisory
-
http://www.securitytracker.com/id/1033859
JBoss Enterprise Application Platform Bugs Let Remote Users Deny Service and Conduct Clickjacking and Cross-Site Request Forgery Attacks - SecurityTracker
-
http://rhn.redhat.com/errata/RHSA-2015-1907.html
RHSA-2015:1907 - Security Advisory - Red Hat Customer PortalVendor Advisory
Jump to