CVE-2022-3322: Lock WARP switch bypass on WARP mobile client using iOS quick action
Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quick action.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-3322?
CVE-2022-3322 is a vulnerability in the Cloudflare Warp Mobile Client that allows users to bypass the Lock Warp switch feature in the Zero Trust platform.
What is the severity of CVE-2022-3322?
CVE-2022-3322 has a severity rating of 7.5 (high).
How does CVE-2022-3322 work?
CVE-2022-3322 works by exploiting insufficient policy verification in the WARP iOS client, allowing users to bypass the 'Disable WARP' quick action.
Which software versions are affected by CVE-2022-3322?
CVE-2022-3322 affects Cloudflare Warp Mobile Client versions up to and excluding 6.14.
Is there a fix for CVE-2022-3322?
It is recommended to update to a version of Cloudflare Warp Mobile Client that is later than 6.14 to fix CVE-2022-3322.