CVE-2022-1254: A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and…

PriorityP429medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.75%

50.3th percentile

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 allows a remote attacker to redirect a user to a malicious website controlled by the attacker. This is possible because SWG incorrectly creates a HTTP redirect response when a user clicks a carefully constructed URL. Following the redirect response, the new request is still filtered by the SWG policy.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
mcafee	web_gateway	>= 10.0.0 < 10.2.9	10.2.9
mcafee	web_gateway	>= 11.0.0 < 11.1.3	11.1.3
mcafee	web_gateway	>= 7.0.0 < 7.8.2.31	7.8.2.31
mcafee	web_gateway	>= 8.0.0 < 8.2.27	8.2.27
mcafee	web_gateway	>= 9.0.0 < 9.2.20	9.2.20
mcafee_llc	secure_web_gateway	>= 10.X < 10.2.9	10.2.9
mcafee_llc	secure_web_gateway	>= 7.x < 7.8.2.31	7.8.2.31
mcafee_llc	secure_web_gateway	>= 8.x < 8.2.27	8.2.27
mcafee_llc	secure_web_gateway	>= 9.x < 9.2.20	9.2.20
mcafee_llc	secure_web_gateway	>= Controlled 11.x < 11.1.3	11.1.3

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.