Description
By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zero Trust security policies (e.g. Secure Web Gateway policies) and features such as 'Lock WARP switch'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cloudflare | WARP | unspecified – < 2022.5.341.0, unspecified – < 2022.5.346, unspecified – < 2022.5.227.0 | 2022.5.341.0 |