Lucene search

K
hackeroneJoshatmotionH1:1635748
HistoryJul 13, 2022 - 1:16 p.m.

Cloudflare Public Bug Bounty: Ability to bypass locked Cloudflare WARP on wifi networks.

2022-07-1313:16:05
joshatmotion
hackerone.com
$1000
30
cloudflare
bug bounty
bypass
wifi
zero trust policies

EPSS

0.001

Percentile

42.8%

Using warp-cli command β€œadd-trusted-ssid”, a user was able to disconnect WARP client and bypass the β€œLock WARP switch” feature resulting in Zero Trust policies not being enforced on an affected endpoint.

EPSS

0.001

Percentile

42.8%