Skyhigh Secure Web Gateway (Swg)
Approved changes feed: RSS · Atom
cpe:2.3:a:skyhigh_security:skyhigh_secure_web_gateway_(swg):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Skyhigh Security (5b9af88e-e28c-5f93-815b-0daee15c2f58) |
|---|---|
| Product | Skyhigh Secure Web Gateway (Swg) (98b29931-8ebe-5394-95b4-0c28ac0501ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4400 |
vulnerable | 2026-06-08 06:16:12.288768 |
Details available
MEDIUM (6.2)
A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to be extracted through SWG REST API. This was possible due to SWG storing the password in plain text in some configuration files.
Published: 2023-09-13T06:53:11.400Z
Updated: 2024-09-25T15:19:09.095Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2310 |
vulnerable | 2026-06-08 05:43:35.278896 |
Skyhigh SWG Authentication bypass vulnerability
CRITICAL (10)
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.
Published: 2022-07-27T09:20:11.000Z
Updated: 2024-08-03T00:32:09.383Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.