PT-2022-15299
CVE-2022-2225
·
Published
2022-07-26
·
Updated
2022-08-01
Description by
CVSS 3.1
8.1
HighMetricsAV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WARP (affected versions not specified)
Description
The issue allows a user without admin privileges to bypass configured Zero Trust security policies, such as Secure Web Gateway policies, and features like 'Lock WARP switch' by utilizing warp-cli subcommands like
disable-ethernet and disable-wifi.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾