Unverified SSL Certificates in Barracuda Web Filter

CVE-2015-0961 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Learn more about our Web App Pen Testing.