CVE-2022-2310: skyhigh security skyhigh secure web gateway (swg) Authentication Bypass by Spoofing
Vulnerability summary
CVE-2022-2310 is a critical (CVSS 10.0) Authentication Bypass by Spoofing vulnerability in skyhigh security skyhigh secure web gateway (swg). EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 68.6% of scored vulnerabilities.
Timeline
- 27-07-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.24%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
+0.06 pp
From 1.18% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Skyhigh security1 product
- skyhigh secure web gateway (swg)≥ 10.x, < 10.2.12 | ≥ 9.x, < 9.2.23 | ≥ 8.x, < 8.2.28 | ≥ Controlled 11.x, < 11.2.1
Skyhighsecurity1 product
- secure_web_gateway≥ 8.0.0, < 8.2.28 | ≥ 9.0.0, < 9.2.23 | ≥ 10.0.0, < 10.2.12 | ≥ 11.0.0, < 11.2.1
2 vendors · 2 products