Lucene search
K

CVE-2014-2595

🗓️ 12 Feb 2020 00:45:21Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 126 Views🌐 WEB

Barracuda WAF 7.8.1.013 allows bypass of authentication

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2014-2595
4 Aug 201400:00
circl
Cvelist
CVE-2014-2595
12 Feb 202000:45
cvelist
NVD
CVE-2014-2595
12 Feb 202001:15
nvd
Packet Storm
Barracuda WAF Authentication Bypass
4 Aug 201400:00
packetstorm
Prion
Authentication flaw
12 Feb 202001:15
prion
securityvulns
CVE-2014-2595 - Authentication Bypass in Barracuda Web Application Firewall
11 Aug 201400:00
securityvulns
securityvulns
Barracuda Networks Firewall / Web Firewall / Spam&Virus Firewall security vulnerabilities
26 Aug 201400:00
securityvulns
NVD
ParameterPositionPathDescriptionCWE
auth_typequery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
etquery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
localequery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
passwordquery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
primary_tabquery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
secondary_tabquery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613
userquery paramcgi-mod/index.cgiAuthentication bypass via a non-expiring token in the query string allowing access to the Barracuda WAF interfaceCWE-613

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 02:06Current
9.5High risk
Vulners AI Score9.5
CVSS 27.5
CVSS 3.19.8
EPSS0.57469
126