An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x before 10.2.12, 9.x before 9.2.23, 8.x before 8.2.28, and controlled release 11.x before 11.2.1 allows a remote malicious user to bypass authentication into the administration User Interface. This is possible because of SWG incorrectly whitelisting authentication bypass methods and using a weak crypto password. This can lead to the attacker logging into the SWG admin interface, without valid credentials, as the super user with complete control over the SWG.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
skyhighsecurity secure web gateway |
Vulmon