Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3337

Опубликовано: 28 окт. 2022
Источник: nvd
CVSS3: 6.7
CVSS3: 8.5
EPSS Низкий

Описание

It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  feature being enabled on Zero Trust Platform. This led to bypassing policies and restrictions enforced for enrolled devices by the Zero Trust platform.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cloudflare:warp_mobile_client:*:*:*:*:*:iphone_os:*:*
Версия до 6.15 (исключая)

EPSS

Процентиль: 25%
0.00085
Низкий

6.7 Medium

CVSS3

8.5 High

CVSS3

Дефекты

CWE-862
CWE-290

EPSS

Процентиль: 25%
0.00085
Низкий

6.7 Medium

CVSS3

8.5 High

CVSS3

Дефекты

CWE-862
CWE-290