Vulnerability in Barracuda Web_filter
CVE-2015-0961
Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c…
EPSS: 0.008 (51.2th percentile) — read the EPSS interpretation.
Affected products
- Barracuda Web_filter
- N/a — versions n/a
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)