Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2022-3512

Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cloudflare

Description

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloudflare WARP

Default version status: unaffected

  • 0 to < 2022.8.857affected

Cloudflare WARP

Default version status: unaffected

  • 0 to < 2022.8.936affected

Cloudflare WARP

Default version status: unaffected

  • 0 to < 2022.8.861affected

References