Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.
References
| Link | Resource |
|---|---|
| https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:51
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint. |
Information
Published : 2022-10-28 10:15
Updated : 2023-11-07 03:51
NVD link : CVE-2022-3512
Mitre link : CVE-2022-3512
JSON object : View
Products Affected
cloudflare
- warp
CWE