CVE-2022-20805

A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypass the SSL decryption and content filtering policies on an affected system. This vulnerability is due to how the decryption function uses the TLS Sever Name Indication (SNI) extension of an HTTP request to discover the destination domain and determine if the request needs to be decrypted. An attacker could exploit this vulnerability by sending a crafted request over TLS from a client to an unknown or controlled URL. A successful exploit could allow an attacker to bypass the decryption process of Cisco Umbrella SWG and allow malicious content to be downloaded to a host on a protected network. There are workarounds that address this vulnerability.

• CWE-693
• CWE-327

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uswg-fdbps-xtTRKpp6Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uswg-fdbps-xtTRKpp6Vendor Advisory

Published

Apr 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2080The Sensei LMS WordPress plugin before 4.5.2 does not ensure…4.3
• CVE-2022-20800A vulnerability in the web-based management interface of Cis…6.1
• CVE-2022-20801Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2022-20802A vulnerability in the web interface of Cisco Enterprise Cha…5.4
• CVE-2022-20803A vulnerability in the OLE2 file parser of Clam AntiVirus (C…7.5
• CVE-2022-20804A vulnerability in the Cisco Discovery Protocol of Cisco Uni…6.5
• CVE-2022-20806Multiple vulnerabilities in the API and web-based management…7.1
• CVE-2022-20807Multiple vulnerabilities in the API and web-based management…6.5
• CVE-2022-20808A vulnerability in Cisco Smart Software Manager On-Prem (SSM…6.5
• CVE-2022-20809Multiple vulnerabilities in the API and web-based management…6.5
• CVE-2022-2081A vulnerability exists in the HCI Modbus TCP function includ…7.5
• CVE-2022-20810A vulnerability in the Simple Network Management Protocol (S…6.5