The Barracuda WAF management application transmits the current user and session identifier over HTTP GET. Firmware version 8.0.1.014 is affected.
Source: Barracuda WAF V360 Firmware 8.0.1.014 Username / Session ID Leak

The post Barracuda WAF V360 Firmware 8.0.1.014 Username / Session ID Leak appeared first on MondoUnix.