CVE-2015-5220

MEDIUM

Description

The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers to cause a denial of service (memory consumption) via a large request header.

References

http://rhn.redhat.com/errata/RHSA-2015-1904.html

http://rhn.redhat.com/errata/RHSA-2015-1905.html

http://rhn.redhat.com/errata/RHSA-2015-1906.html

http://rhn.redhat.com/errata/RHSA-2015-1907.html

http://rhn.redhat.com/errata/RHSA-2015-1908.html

http://rhn.redhat.com/errata/RHSA-2016-1519.html

http://www.securitytracker.com/id/1033859

https://bugzilla.redhat.com/show_bug.cgi?id=1255597

Details

Source: MITRE

Published: 2015-10-27

Updated: 2016-08-04

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 5

Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM