CVE-2022-20784 Cisco Web Security Appliance Filter Bypass Vulnerability
Unauthenticated attackers can bypass web proxy policies and access blocked content by sending crafted URLs to Cisco Web Security Appliances.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20784?
CVE-2022-20784 is a medium-severity vulnerability in Cisco Web Security Appliance, published on 6 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an affected device. This vulnerability is due to incorrect handling of certain character combinations inserted into a URL. An attacker could exploit this vulnerability by sending crafted URLs to be processed by an affected device. A successful exploit could allow the attacker to bypass the web proxy and access web content that has been blocked by policy.
Weakness: CWE-20
Which versions are affected by CVE-2022-20784?
It affects 1 product.
Products include Cisco Web Security Appliance.
How do I fix CVE-2022-20784?
No fix has been published for CVE-2022-20784 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-20784 being exploited?
There is no known exploitation of CVE-2022-20784 in the wild and no public exploit code.
Other vulnerabilities in Cisco Web Security Appliance
Sources
Also known as GHSA-vv88-544v-pvq3.