Clickjacking vulnerability in application hosted on JBoss EAP

Solution Verified - Updated -

Issue

  • The clickjacking vulnerability is observed in application hosted on JBoss EAP. In order to remove this vulnerability, we found that webpage should not be opened in Frames.
  • Kindly share necessary configurations required on JBoss to remove this vulnerability.

Environment

  • RedHat JBoss Enterprise Application (EAP)
    • 6.x
    • 7.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.