GCVE-110-CERTCC-2015-534407

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published April 28, 2015

Barracuda Web Filter prior to version 8.1.0.005 does not properly check upstream certificate validity when performing SSL inspection, and delivers one of three default root CA certificates across multiple machines for SSL inspection.

Download JSON Open in Console

Risk Scores

CVSS 2.0

8.8/10

High · AV:N/AC:M/Au:N/C:C/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report0

certcc-cvss-temporal-env

temporal_score6.9remediation_levelOFreport_confidenceCenvironmental_score5.1515633023344target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND