CVE-2023-4400: skyhigh security skyhigh secure web gateway (swg) Plaintext Storage of a Password
Vulnerability summary
CVE-2023-4400 is a medium (CVSS 6.5) Plaintext Storage of a Password vulnerability in skyhigh security skyhigh secure web gateway (swg). EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 27.9% of scored vulnerabilities.
Timeline
- 13-09-2023PublishedVulnerability first disclosed.
- 25-09-2024Last modifiedVulnerability information updated.
Description
A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to be extracted through SWG REST API. This was possible due to SWG storing the password in plain text in some configuration files.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA6.2MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:NDiffers
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
28%
Versus all other CVEs
30-day change
0.00 pp
From 0.36% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Skyhigh security1 product
- skyhigh secure web gateway (swg)≥ 11.x, < 11.2.14 | ≥ 10.x, < 10.2.25 | ≥ 12.x, < 12.2.1
Skyhighsecurity1 product
- secure_web_gateway≥ 10.0.0, < 10.2.25 | ≥ 11.0.0, < 11.2.14 | ≥ 12.0.0, < 12.2.1
2 vendors · 2 products
References
2 links- github.com/advisories/GHSA-qggp-c2rq-6x65Third Party Advisory