PT-2022-15842 · Mcafee · Skyhigh Swg

Published 2022-07-27 · Updated 2023-11-15 · CVE-2022-2310

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Skyhigh SWG versions 8.x through 8.2.27 Skyhigh SWG versions 9.x through 9.2.22 Skyhigh SWG versions 10.x through 10.2.11 Skyhigh SWG versions 11.x through 11.2.0

Description The issue allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. The attacker can log into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.

Recommendations For Skyhigh SWG versions 8.x through 8.2.27, update to version 8.2.28 or later. For Skyhigh SWG versions 9.x through 9.2.22, update to version 9.2.23 or later. For Skyhigh SWG versions 10.x through 10.2.11, update to version 10.2.12 or later. For Skyhigh SWG versions 11.x through 11.2.0, update to version 11.2.1 or later.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2022-2310

Affected Products

Skyhigh Swg

References · 5

• https://osv.dev/vulnerability/CVE-2022-2310 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2310 · Security Note
• https://kcm.trellix.com/corporate/index?page=content&id=SB10384&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_US · Vendor Advisory
• https://t.me/cvenotify/34172 · Telegram Post
• https://t.me/cvenotify/33826 · Telegram Post