4.3

CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Barracuda ≫ Web Filter Version7.0
Barracuda ≫ Web Filter Version7.0.1
Barracuda ≫ Web Filter Version7.1.0
Barracuda ≫ Web Filter Version8.0
Barracuda ≫ Web Filter Version8.0.002
Barracuda ≫ Web Filter Version8.0.003
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.692
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.kb.cert.org/vuls/id/534407
Third Party Advisory
US Government Resource
https://blog.barracuda.com/2015/04/28/barracuda-delivers-updated-ssl-inspection-feature/
Vendor Advisory
https://techlib.barracuda.com/BWF/UpdateSSLCerts
Vendor Advisory
https://www.barracuda.com/support/techalerts
Vendor Advisory