CVE-2022-20805 — Protection Mechanism Failure in Cisco Umbrella Insights Virtual Appliance

CWE-693 — Protection Mechanism FailureCWE-327 — Use of a Broken or Risky Cryptographic Algorithm4 documents4 sources
Severity
4.1MEDIUMNVD
EPSS
0.0%
top 90.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Umbrella Insights Virtual Appliance
Timeline
PublishedApr 21
Latest updateApr 22

Description

A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypass the SSL decryption and content filtering policies on an affected system. This vulnerability is due to how the decryption function uses the TLS Sever Name Indication (SNI) extension of an HTTP request to discover the destination domain and determine if the request needs to be decrypted. An attacker could exploit this vulnerability by sending a cr…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:NExploitability: 2.3 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5j9q-qmpc-xr4h: A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypa↗2022-04-22
▶
CVEList
Cisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability↗2022-04-21
▶

📋Vendor Advisories

1
Cisco
Cisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability↗2022-04-20
▶
CVE-2022-20805 — Protection Mechanism Failure in Cisco | cvebase