CVE-2015-0962 - CVE House
Back to Database
Status published Medium CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL...

Vulnerability Description

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-0962

Credits & Attribution

No credits recorded in the NVD database.

References

More from barracuda

View All →
CVE-2021-42711
Barracuda Network Access Client before 5.2.2 creates a Temporary File...
High 7.8
CVE-2019-6724
The barracudavpn component of the Barracuda VPN Client prior to...
High 7.8
CVE-2018-20369
Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling...
Medium 6.1
CVE-2017-6320
A remote command injection vulnerability exists in the Barracuda Load...
High 8.8
CVE-2015-0961
Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled,...
Medium 4.3

Affected Vendor

Affected Software

web filter
Vulnerable Versions:
7.0, 7.0.1, 7.1.0, 8.0, 8.0.002, 8.0.003

Timeline

Official Publish: May 25th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.