Password Management Vulnerability in Skyhigh Secure Web Gateway by McAfee

CVE-2023-4400

What is CVE-2023-4400?

A vulnerability has been identified in the Skyhigh Secure Web Gateway (SWG) that allows sensitive authentication information to be compromised. This issue arises from the storage of passwords in plaintext within certain configuration files. As a result, an attacker leveraging the SWG REST API may access these credentials, posing significant security risks to affected installations. Organizations using affected versions should take immediate steps to remediate this vulnerability to safeguard their data.

References