VYPR

Warp Mobile Client

by Cloudflare

CVEs (3)

  • CVE-2022-3337MedOct 28, 2022
    risk 0.44cvss 6.7epss 0.00

    It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  feature being enabled on Zero Trust…

  • CVE-2022-3322MedOct 28, 2022
    risk 0.44cvss 6.7epss 0.00

    Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. Due to insufficient policy verification by WARP iOS client, this feature could be bypassed by using the "Disable WARP" quick action.

  • CVE-2022-3321MedOct 28, 2022
    risk 0.44cvss 6.7epss 0.00

    It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks"…