PT-2022-21737
CVE-2022-3320
·
تاريخ النشر
2022-10-28
·
تاريخ التحديث
2022-10-31
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WARP Client (affected versions not specified)
Description
The issue allows bypassing policies configured for Zero Trust Secure Web Gateway. This can be achieved by using the
warp-cli command with the set-custom-endpoint subcommand and specifying an unreachable endpoint, which causes the WARP Client to disconnect. As a result, administrative restrictions on a Zero Trust enrolled endpoint can be bypassed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾