CVE-2022-3322CWE-862

Lock WARP switch bypass on WARP mobile client using iOS quick action

Medium · published October 28, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

Lock Warp switch is a feature of Zero Trust platform which, when

enabled, prevents users of enrolled devices from disabling WARP client.

Due to insufficient policy verification by WARP iOS client, this

feature could be bypassed by using the "Disable WARP" quick action.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-10-28T09:25Z
EPSS history
Timeline
  • 28 OCT 09:25Z
    Lock WARP switch bypass on WARP mobile client using iOS quick action
    cvelistv5