Lucene search

K
nvd[email protected]NVD:CVE-2022-3322
HistoryOct 28, 2022 - 10:15 a.m.

CVE-2022-3322

2022-10-2810:15:17
CWE-862
CWE-347
web.nvd.nist.gov
lock warp
zero trust
policy verification

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

26.3%

Lock Warp switch is a feature of Zero Trust platform which, when
enabled, prevents users of enrolled devices from disabling WARP client.
Due to insufficient policy verification by WARP iOS client, this
feature could be bypassed by using the “Disable WARP” quick action.

Affected configurations

NVD
Node
cloudflarewarp_mobile_clientRange<6.14iphone_os

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

26.3%

Related for NVD:CVE-2022-3322