Vulnerability in Barracuda Web_filter

CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-…

EPSS: 0.006 (70.4th percentile) — read the EPSS interpretation.

Affected products

Barracuda Web_filter — versions 7.0, 7.0.1, 7.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-18

References

VU#534407 (x_refsource_CERT-VN, US Government Resource, Third Party Advisory, third-party-advisory)
cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)