Vulnerability · Published Jul 27, 2022 · Assigned by trellix
CVE-2022-2310Skyhigh SWG Authentication bypass vulnerability
Critical 10.0
In plain English
A critical-severity authentication bypass by spoofing in Skyhigh Secure Web Gateway (SWG) from Skyhigh Security. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Official description
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Skyhigh Security | Skyhigh Secure Web Gateway (SWG) | 10.x – before 10.2.129.x – before 9.2.238.x – before 8.2.28Controlled 11.x – before 11.2.1 |
Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H