CVE-2022-20805 (CNNVD-202204-3903)
中文标题:
Cisco Umbrella 加密问题漏洞
英文标题:
Cisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability
漏洞描述
中文描述:
Cisco Umbrella是美国思科（Cisco）公司的一套云安全平台。该平台能够预防网络钓鱼、恶意软件和勒索软件等网络威胁。 Cisco Umbrella Secure Web Gateway (SWG) 中存在安全漏洞，攻击者可以通过从客户端通过 TLS 向未知或受控 URL 发送精心设计的请求来绕过 Cisco Umbrella SWG 的解密过程，并允许将恶意内容下载到受保护网络上的主机。
英文描述:
A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypass the SSL decryption and content filtering policies on an affected system. This vulnerability is due to how the decryption function uses the TLS Sever Name Indication (SNI) extension of an HTTP request to discover the destination domain and determine if the request needs to be decrypted. An attacker could exploit this vulnerability by sending a crafted request over TLS from a client to an unknown or controlled URL. A successful exploit could allow an attacker to bypass the decryption process of Cisco Umbrella SWG and allow malicious content to be downloaded to a host on a protected network. There are workarounds that address this vulnerability.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Umbrella Insights Virtual Appliance | n/a | - | - |
cpe:2.3:a:cisco:cisco_umbrella_insights_virtual_appliance:n_a:*:*:*:*:*:*:*
|
| cisco | umbrella_secure_web_gateway | * | - | - |
cpe:2.3:a:cisco:umbrella_secure_web_gateway:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-20805 |
2025-11-11 15:21:15 | 2025-11-11 07:37:15 |
| NVD | nvd_CVE-2022-20805 |
2025-11-11 14:58:17 | 2025-11-11 07:45:32 |
| CNNVD | cnnvd_CNNVD-202204-3903 |
2025-11-11 15:10:52 | 2025-11-11 07:57:15 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 加密问题
- cnnvd_id: 未提取 -> CNNVD-202204-3903
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']