Cleartext storage of sensitive information in Skyhigh Secure Web Gateway
Priority LOW 29CWE-256Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-256.
Summary
A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to be extracted through SWG REST API. This was possible due to SWG storing the password in plain text in some configuration files.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00356 29th percentileScored 2026-11-07
Fix Fixed Skyhigh Secure Web Gateway (SWG) (Skyhigh Security): 11.2.14, 10.2.25, 12.2.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Skyhigh Security | Skyhigh Secure Web Gateway (SWG) | 11.x to before 11.2.14; 10.x to before 10.2.25; 12.x to before 12.2.1 | 11.2.14, 10.2.25, 12.2.1 | Patch available | CNA |
- Skyhigh Secure Web Gateway (SWG) VendorSkyhigh Security Affected 11.x to before 11.2.14; 10.x to before 10.2.25; 12.x to before 12.2.1 Fixed in 11.2.14, 10.2.25, 12.2.1 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:skyhighsecurity:secure_web_gateway:*:*:*:*:*:*:*:* | 10.0.0 to before 10.2.25; 11.0.0 to before 11.2.14; 12.0.0 to before 12.2.1 | Vulnerable | Skyhigh Security |
- cpe:2.3:a:skyhighsecurity:secure_web_gateway:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.2.25; 11.0.0 to before 11.2.14; 12.0.0 to before 12.2.1 Vulnerable ·Skyhigh Security
Remediation
- Fix · CNA Skyhigh Secure Web Gateway (SWG) (Skyhigh Security) Fixed in 11.2.14, 10.2.25, 12.2.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-4400
- 2026-10-03 Alias added: GHSA-qggp-c2rq-6x65
References
More Skyhigh Security Secure Web Gateway vulnerabilities
- TI-2022-02133 Skyhigh SWG Authentication bypass vulnerability CVSS 3.1CRITICAL 10.0
- TI-2024-05940 Information disclosure in Skyhigh Secure Web Gateway CVSS 3.1MEDIUM 5.3
Sources
- CVE-2023-4400 · CVE Program
- CVE-2023-4400 · NVD
- FIRST EPSS
- GHSA-qggp-c2rq-6x65 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences