Code injection

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

PT-2020-11153

Name of the Vulnerable Software and Affected Versions Barracuda Load Balancer ADC versions prior to 6.4 Description The issue allows an authenticated administrative user to modify the LDAP service configuration, potentially exposing LDAP credentials over the network by changing the LDAP server to...

CVE-2019-5648: Insufficiently Protected Credentials

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...