SWG URL redirection vulnerability

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 allows a remote attacker to redirect a user to a malicious website controlled by the attacker. This is possible because SWG incorrectly creates a HTTP redirect response when a user clicks a carefully constructed URL. Following the redirect response, the new request is still filtered by the SWG policy.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

指向未可信站点的URL重定向(开放重定向)

McAfee Skyhigh Secure Web Gateway 输入验证错误漏洞

McAfee Skyhigh Secure Web Gateway（McAfee Skyhigh SWG）是美国McAfee公司的一系列安全网关。 McAfee Skyhigh Secure Web Gateway 存在输入验证错误漏洞，该漏洞源于应用重定向响应存在问题。远程攻击者利用该漏洞可以将用户重定向到攻击者控制的恶意网站。

N/A

输入验证错误