PT-2022-14957
CVE-2022-2145
·
تاريخ النشر
2022-06-28
·
تاريخ التحديث
2022-07-08
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cloudflare WARP client for Windows versions up to 2022.5.309.0
Description
The issue allows creation of mount points from the ProgramData folder of the Cloudflare WARP client during its installation. This could lead to privilege escalation and the overwrite of SYSTEM protected files.
Recommendations
For versions up to 2022.5.309.0, consider restricting access to the ProgramData folder as a temporary mitigation measure until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾