CVE-2022-2310

published 2022-07-27

CVE-2022-2310: An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
skyhigh_security	skyhigh_secure_web_gateway	>= 10.x < 10.2.12	10.2.12
skyhigh_security	skyhigh_secure_web_gateway	>= 8.x < 8.2.28	8.2.28
skyhigh_security	skyhigh_secure_web_gateway	>= 9.x < 9.2.23	9.2.23
skyhigh_security	skyhigh_secure_web_gateway	>= Controlled 11.x < 11.2.1	11.2.1
skyhighsecurity	secure_web_gateway	>= 10.0.0 < 10.2.12	10.2.12
skyhighsecurity	secure_web_gateway	>= 11.0.0 < 11.2.1	11.2.1
skyhighsecurity	secure_web_gateway	>= 8.0.0 < 8.2.28	8.2.28
skyhighsecurity	secure_web_gateway	>= 9.0.0 < 9.2.23	9.2.23

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-290