Vulnerability · Published Oct 28, 2022 · Assigned by cloudflare
CVE-2022-3321Lock WARP switch feature bypass on WARP mobile client for iOS
Medium 6.7
In plain English
A medium-severity missing authorization in WARP from Cloudflare. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Official description
It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks" switches at once in the application settings. Such configuration caused the WARP client to disconnect and allowed the user to bypass restrictions and policies enforced by the Zero Trust platform.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cloudflare | WARP | 0 – before 6.14 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L