PT-2023-25982 · Cloudflare · Cloudflare Warp

CVE-2023-3747

·

Publicado

2023-09-07

·

Atualizado

2023-09-13

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cloudflare WARP (affected versions not specified)
Description The issue allows an attacker with local access to a device to extend the maximum allowed disconnected time of the WARP client granted by an override code. This is possible due to a lack of server-side validation, which can be exploited by changing the date and time on the local device where WARP is running.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-3747

Produtos afetados

Cloudflare Warp