NetSight
medium6.7

CVE-2022-3512

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies…

Impact

Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.

Affected products

VendorProductAffected versions
CloudflareWarp
before 2022.8.857.0
before 2022.8.861.0
before 2022.8.936

Weakness classification

References