CVE-2022-3321

CVE-2022-3321 affects the Cloudflare WARP iOS client. The issue arises when a user enables both “Disable for cellular networks” and “Disable for Wi‑Fi networks” in the app settings, which causes the WARP client to disconnect and allows bypassing restrictions and policies enforced by the Zero Trus...

CVE-2022-3337

Cloudflare WARP on iOS is affected by CVE-2022-3337: a user can delete the VPN profile despite the Lock WARP switch being enabled, bypassing policies enforced by the Zero Trust platform on enrolled devices. Affected product is the Cloudflare WARP mobile client for iOS; the vulnerability relates t...

CVE-2022-3322

The CVE-2022-3322 issue concerns Cloudflare WARP on iOS where the Lock Warp switch can be bypassed due to insufficient policy verification in the WARP iOS client. A bypass via the"Disable WARP" quick action allows enrolled devices to disable the WARP client even when the Lock Warp feature is enab...