ID de Prueba:	1.3.6.1.4.1.25623.1.0.105287
Categoría:	Web application abuses
Título:	Barracuda Web Filter < 8.1.0.005 SSL Certificate Multiple Security Bypass Vulnerabilities
Resumen:	Barracuda Web Filter is prone to multiple security-bypass; vulnerabilities.
Descripción:	Summary: Barracuda Web Filter is prone to multiple security-bypass vulnerabilities. Vulnerability Insight: Barracuda Web Filter when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship. Vulnerability Impact: Successfully exploiting these issues allow attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. Affected Software/OS: Barracuda Web Filter versions 7.x and 8.x prior to 8.1.0.005. Solution: Update to version 8.1.0.005 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0961 CERT/CC vulnerability note: VU#534407 http://www.kb.cert.org/vuls/id/534407 Common Vulnerability Exposure (CVE) ID: CVE-2015-0962
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.