CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.

• CWE-18

• http://www.kb.cert.org/vuls/id/534407Third Party Advisory, US Government Resource
• https://blog.barracuda.com/2015/04/28/barracuda-delivers-updated-ssl-inspection-feature/Vendor Advisory
• https://techlib.barracuda.com/BWF/UpdateSSLCertsVendor Advisory
• https://www.barracuda.com/support/techalertsVendor Advisory
• http://www.kb.cert.org/vuls/id/534407Third Party Advisory, US Government Resource
• https://blog.barracuda.com/2015/04/28/barracuda-delivers-updated-ssl-inspection-feature/Vendor Advisory
• https://techlib.barracuda.com/BWF/UpdateSSLCertsVendor Advisory
• https://www.barracuda.com/support/techalertsVendor Advisory

Published

May 25, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0943Basware Banking (Maksuliikenne) before 9.10.0.0 does not enc…
• CVE-2015-0949The System Management Mode (SMM) implementation in Dell Lati…7.8
• CVE-2015-0950Cross-site scripting (XSS) vulnerability in admin.php in X-C…
• CVE-2015-0951X-Cart before 5.1.11 allows remote authenticated users to re…
• CVE-2015-0955Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-0961Barracuda Web Filter before 8.1.0.005, when SSL Inspection i…
• CVE-2015-0967Multiple cross-site scripting (XSS) vulnerabilities in Searc…
• CVE-2015-0968Unrestricted file upload vulnerability in admin/uploadImage.…
• CVE-2015-0969SearchBlox before 8.2 allows remote attackers to obtain sens…
• CVE-2015-0970Cross-site request forgery (CSRF) vulnerability in SearchBlo…8.8
• CVE-2015-0971The DER parser in Suricata before 2.0.8 allows remote attack…
• CVE-2015-0972Pearson ProctorCache before 2015.1.17 uses the same hardcode…