Loading
Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Use Barracuda vendor hub and Web Filter product page to widen CVE-2015-0961 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2015-0962 for nearby disclosures in the same product family.