CVE-2024-6398: Infoleak
An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because other recommended default security policies such as URL categorization and GTI are in place in most policies to block access to uncategorized/high risk websites. Any information disclosed depends on how the customers have customized the block pages.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SWGto a version that resolves this vulnerability.Fixed in 12.2.10 - Upgrade
Upgrade
SWGto a version that resolves this vulnerability.Fixed in 11.2.24
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6398?
The severity of CVE-2024-6398 is classified as low.
How do I fix CVE-2024-6398?
To fix CVE-2024-6398, upgrade to Secure Web Gateway version 12.2.10 or 11.2.24 or later.
What versions of Secure Web Gateway are affected by CVE-2024-6398?
Secure Web Gateway versions prior to 12.2.10 and 11.2.24 are affected by CVE-2024-6398.
What does CVE-2024-6398 allow attackers to do?
CVE-2024-6398 allows information stored in a customizable block page to be disclosed to third-party websites due to a Same Origin Policy Bypass.
In which scenarios does CVE-2024-6398 present a risk?
CVE-2024-6398 presents a risk in certain scenarios where third-party websites can access sensitive information due to the vulnerability.