Lucene search

K
hackeroneJoshatmotionH1:1633231
HistoryJul 11, 2022 - 9:19 a.m.

Cloudflare Public Bug Bounty: Completely remove VPN profile from locked WARP iOS cient.

2022-07-1109:19:51
joshatmotion
hackerone.com
$1000
37

0.001 Low

EPSS

Percentile

31.4%

It was possible for a user to delete VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch feature being enabled on Zero Trust Platform. This led to bypassing policies and restriction enforced for enrolled devices by the Zero Trust platform.
The issue was fixed in Warp iOS mobile client v. 6.15.

0.001 Low

EPSS

Percentile

31.4%

Related for H1:1633231