PT-2023-29061 · Mcafee · Skyhigh Secure Web Gateway

Published 2023-09-13 · Updated 2023-09-15 · CVE-2023-4400

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Skyhigh Secure Web Gateway (SWG) versions 11.x prior to 11.2.14 Skyhigh Secure Web Gateway (SWG) versions 10.x prior to 10.2.25 Skyhigh Secure Web Gateway (SWG) versions 12.x prior to 12.2.1

Description A password management issue in Skyhigh Secure Web Gateway (SWG) allows some authentication information stored in configuration files to be extracted through the SWG REST API. This is possible due to the SWG storing passwords in plain text in some configuration files.

Recommendations For versions 11.x prior to 11.2.14, update to version 11.2.14 or later. For versions 10.x prior to 10.2.25, update to version 10.2.25 or later. For versions 12.x prior to 12.2.1, update to version 12.2.1 or later. As a temporary workaround, consider restricting access to the SWG REST API until a patch is applied.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

CWE-256

Related Identifiers

CVE-2023-4400

GHSA-QGGP-C2RQ-6X65

Affected Products

Skyhigh Secure Web Gateway

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-4400 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4400 · Vendor Advisory
• https://t.me/cibsecurity/70371 · Telegram Post
• https://kcm.trellix.com/corporate/index?page=content&id=SB10406 · Note
• https://twitter.com/VulmonFeeds/status/1701938598117859582 · Twitter Post
• https://twitter.com/CVEnew/status/1701866664789475832 · Twitter Post
• https://github.com/advisories/GHSA-qggp-c2rq-6x65 · Note