← CVE Intelligence

CVE-2022-2225

Zero Trust Secure Web Gateway policies bypass using WARP client subcommands PUBLISHED

Description (CNA)

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'.

Affected (CNA)

Vendor / productVersions
Cloudflare / WARPaffected unspecified before 2022.5.341.0
Cloudflare / WARPaffected unspecified before 2022.5.346
Cloudflare / WARPaffected unspecified before 2022.5.227.0

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.