critical9.8Public exploit code
CVE-2014-2595
Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained fro…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Barracuda Web Application Firewall - Authentication Bypass2014-08-04 · remote · hardware · Verified
Impact
Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Barracuda | Web Application Firewall | Version 7.8.1.013 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2014/Aug/5
- http://www.osvdb.org/109782
- https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004
- https://www.exploit-db.com/exploits/39278
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/
- https://www.securityfocus.com/bid/69028
- http://packetstormsecurity.com/files/127740/Barracuda-WAF-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2014/Aug/5
- http://www.osvdb.org/109782
- https://vulners.com/securityvulns/SECURITYVULNS:DOC:31004
- https://www.exploit-db.com/exploits/39278
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2595/
- https://www.securityfocus.com/bid/69028