PT-2022-14963

CVE-2022-2147

·

Published

2022-06-23

·

Updated

2022-07-01

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cloudflare Warp for Windows versions 2022.2.95.0 through 2022.3.185.0
Description The issue is related to an unquoted service path in Cloudflare Warp for Windows, which enables arbitrary code execution leading to privilege escalation.
Recommendations For versions 2022.2.95.0 through 2022.3.185.0, update to version 2022.3.186.0 to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-428: Unquoted Search Path or Element
Related identifiers
CVE-2022-2147
GHSA-M6W8-3PF9-P68R
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com