CVE-2022-2310: Skyhigh SWG Authentication bypass vulnerability
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2310?
CVE-2022-2310 is an authentication bypass vulnerability in Skyhigh SWG that allows a remote attacker to bypass authentication into the administration User Interface.
What is the severity of CVE-2022-2310?
CVE-2022-2310 has a severity rating of 9.8 (Critical).
Which versions of Skyhigh SWG are affected by CVE-2022-2310?
Skyhigh SWG versions 8.x prior to 8.2.28, 9.x prior to 9.2.23, 10.x prior to 10.2.12, and 11.x prior to 11.2.1 are affected by CVE-2022-2310.
How can a remote attacker exploit CVE-2022-2310?
A remote attacker can exploit CVE-2022-2310 by bypassing authentication and gaining access to the administration User Interface of Skyhigh SWG.
Is there a fix available for CVE-2022-2310?
Yes, upgrading to Skyhigh SWG main releases 10.2.12, 9.2.23, 8.2.28, or controlled release 11.2.1 will fix CVE-2022-2310.