NetSight
high8.1

CVE-2022-2225

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security po…

Impact

By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'.

Affected products

VendorProductAffected versions
CloudflareWarp
before 2022.5.227.0
before 2022.5.341.0
before 2022.5.346

Weakness classification

References