Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
CVE-2022-2225 has no fix on record yet for 1 affected product. It is not reported as exploited. Patch Radar priority: High.
By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| No fix yet | |||
| Cloudflare WARP (Windows apps) | No fix yet | no-fix | n/a |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.