Lucene search

K
hackeroneJoshatmotionH1:1605847
HistoryJun 18, 2022 - 11:14 a.m.

Cloudflare Public Bug Bounty: I found another way to bypass Cloudflare Warp lock!

2022-06-1811:14:32
joshatmotion
hackerone.com
$1000
12

0.001 Low

EPSS

Percentile

29.7%

It was possible to bypass Lock WARP switch feature on WARP iOS mobile client by enabling both โ€œDisable for cellular networksโ€ and โ€œDisable for Wi-Fi networksโ€ switches at once in the application settings. Such configuration caused WARP client to disconnect and allowed the user to bypass restrictions and policies enforced by the Zero Trust platform.
The issue was fixed in version 6.14 of the iOS mobile client.

0.001 Low

EPSS

Percentile

29.7%

Related for H1:1605847