QID 730642
Date Published: 2023-03-09
QID 730642: Skyhigh (McAfee) Web Gateway Uniform Resource Locator (URL) Redirection Vulnerability (SB10381)
Skyhigh Web Gateway delivers comprehensive security for all aspects of web traffic in one high-performance appliance software architecture.
CVE-2022-1254 A URL redirection vulnerability in Skyhigh SWG allows a remote attacker to redirect a user to a malicious website controlled by the attacker.
Affected Versions:
7.x prior to 7.8.2.31
8.x prior to 8.2.27
9.x prior to 9.2.20
10.x prior to 10.2.9
11.x prior to 11.1.3
QID Detection Logic :
This QID retrieves Skyhigh Web Gateway version and checks to see if it's vulnerable.
Successful exploit allows a remote attacker to redirect a user to a malicious website controlled by the attacker.
Solution
Please visit SB10381
Vendor References
CVEs related to QID 730642
Software Advisories
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| SB10381 |
|